Create a SAT rule for the translation:
1. Go to Rules > IP Rules > Add > IPRule
2. Specify a suitable name for the rule, for example SAT_HTTP_To_DMZ
3. Now enter:
• Action: SAT
• Servce: http
• Source Interface:any
• Source Network: all-nets
• Destination Interface: wan
• Destination Network: wwwsrv_pub
4. Switch to the SAT tab
5. Make sure that the Destination IP Address option is selected
6. In the New IP Address dropdown list, select wwwsrv_priv
7. Click OK
Finally, create a corresponding Allow rule:
1. Go to Rules > IP Rules > Add > IPRule
2. Specify a suitable name for the rule, for example Allow_HTTP_To_DMZ
3. Now enter:
• Action: Allow
• Service: http
• Source Interface:any
• Source Network: all-nets
• Destination Interface: wan
• Destination Network: wwwsrv_pub
4. Click OK
7.4.3. All-to-One Mappings (N:1)
NetDefendOS can be used to translate ranges and/or groups into just one IP address.
# Action Src Iface Src Net Dest Iface Dest Net Parameters
1 SAT any all-nets wan 194.1.2.16-194.1.2.20,
194.1.2.30
http SETDEST all-to-one
192.168.0.50 80
This rule produces a N:1 translation of all addresses in the group (the range 194.1.2.16 - 194.1.2.20
and 194.1.2.30) to the IP 192.168.0.50.
• Attempts to communicate with 194.1.2.16 - port 80, will result in a connection to 192.168.0.50.
• Attempts to communicate with 194.1.2.30 - port 80, will result in a connection to 192.168.0.50.
7.4.3. All-to-One Mappings (N:1) Chapter 7. Address Translation
312
To Next Page
Loading...
