Example 7.3. Using NAT Pools
This example creates a stateful NAT pool with the external IP address range 10.6.13.10 to
10.16.13.15. This is then used with a NAT IP rule for HTTP traffic on the wan interface originating
from the lan_net.
Note that if a network such as 10.6.13.0/24 is used for the NAT pool IP range, the 0 and 255
addresses (10.6.13.0 and 10.6.13.255) are automatically excluded from the range.
Command-Line Interface
A. First, create an object in the address book for the address range:
gw-world:/> add Address IP4Address nat_pool_range
Address=10.6.13.10-10.16.13.15
B. Next, create a stateful NAT Pool object called my_stateful_natpool :
gw-world:/> add NatPool my_stateful_natpool
Range=nat_pool_range
Type=Stateful
ProxyARPInterfaces=wan
C. Finally, define the NAT rule in the IP rule set:
gw-world:/> add IPRule Action=NAT
SourceInterface=lan
SourceNetwork=lannet
DestinationInterface=wan
DestinationNetwork=all-nets
Service=http-all
NATAction=UseNATPool
NATPool=my_stateful_natpool
Name=NAT_HTTP
Web Interface
A. First, create an object in the address book for the address range:
1. Go to: Objects > Address Book > Add > IP4 Address
2. Specify a suitable name for the IP range nat_pool_range
3. Enter 10.6.13.10-10.16.13.15 in the IP Address textbox
4. Click OK
B. Next, create a stateful NAT Pool object called my_stateful_natpool :
1. Go to: Objects > NAT Pools > Add > NAT Pool
2. Now enter:
• Name: my_stateful_natpool
• Pool type: stateful
Chapter 7: Address Translation
586
To Next Page
Loading...
