Increasing the number of IP addresses available using NAT
151
Once complete, users of all these machines can access the
Internet through the Internet Firewall DMZ. For the PCs
that need to be visible on the WAN side of the Internet
Firewall DMZ, set their IP addresses, for example, to
192.168.1.212
through
192.168.1.214
.
13
Make sure that the IP addresses of these PCs are visible on
the LAN.
a
Click
Advanced
and then, select the
One to One NAT
tab. Make sure that the
Enable One-to-One NAT
check
box is selected.
b
In the
Private Range Begin
box, type the IP address of
the first PC in the range to have its IP address made
visible on the WAN
192.168.1.212
.
c
In the
Public Range Begin
box, type the first IP address
that you want to appear on the WAN side
172.20.54.212
.
d
In the
Range Length
box, type
3
because there are 3 PCs
that you want to be visible on the Internet. Click
Updat
e. Ta ble 6
shows how the addresses are
translated.
.
One-to-One NAT does not change the way the firewall
functions work. Access to machines on the LAN from the
Internet is only allowed when you have set Network Access
Rules, or established Authenticated User sessions. The
firewall still protects these PCs from anyone accessing them
from the WAN unless you set up further rules.
14
To complete the setup, register the Internet Firewall DMZ.
a
On the Home screen, select
Unit Statu
s. A message is
displayed stating that the Internet Firewall DMZ is not
registered.
Table 6
How the PC Addresses are translated
PC Address Visible Address from the Internet
192.168.1.212 172.20.54.212
192.168.1.213 172.20.54.213
192.168.1.214 172.20.54.214