Configuring IP Router Parameters
50 7705 SAR OS Router Configuration Guide
Dynamic Source NAT
Source NAT can be used to create sessions from inside a private network to an outside
(public) network. If an arriving IP packet on the 7705 SAR matches the NAT policy rules, an
internal mapping is created between the inside (private) source IP address/source port and an
outside (public) source IP address/source port. The public IP address and port are configured
in the NAT pool policy.
NAT automatically creates a reverse mapping for arriving traffic from the public domain to
the private domain for the same connection. This reverse mapping is based on an outside
destination IP address and destination port to an inside destination IP address and destination
port.
Destination IP Specifies an explicit destination IP
address for the match criteria of the rule.
Packets destined for the specified IP
address are evaluated for a match.
dst-ip
Source Port Specifies a source port to match in the IP
packets when the match attribute is
specified as protocol ID
src-port
Destination Port Specifies a destination port to match in
the IP packets when the match attribute is
specified as protocol ID
dst-port
ICMP Code Specifies the ICMP code when the
protocol ID specified for the match
attribute of the rule is set to ICMP
icmp-code
ICMP Type Specifies the ICMP type when the
protocol ID specified for the match
attribute of the rule is set to ICMP
icmp-type
Profile Specifies the profile ID applied to the
policy
profile
Concurrent Sessions Specifies the number of concurrent NAT
sessions that can be created under this
policy
concurrent-
sessions
Table 6: NAT Policy Attributes and Packet Matching Criteria (Continued)
Attribute Description CLI Command
To Next Page
Loading...
