iii. Transposed - This transposes a range of port numbers to a new range using the new
port number as a base for the transposition. This is for a many-to-many port translation.
Example 7.7. Setting up a SAT IP Policy
This example has the same aim as the example described previously but an IP Policy object will
be used instead of multiple IP rules. The aim is to again allow connections from the Internet to a
web server located in a DMZ. The NetDefend Firewall is connected to the Internet using the wan
interface with address object wan_ip (defined as 195.55.66.77) as IP address. The web server has
the IPv4 address 10.10.10.5 and is reachable through the dmz interface.
Command-Line Interface
Create a SAT IP rule:
gw-world:/> add IPPolicy
SourceInterface=any
SourceNetwork=all-nets
DestinationInterface=core
DestinationNetwork=wan_ip
Service=http-all
Name=SAT_HTTP_To_DMZ
Action=Allow
DestNewIP=10.10.10.5
Web Interface
First, create a SAT rule:
1. Go to: Policies > Firewalling > Main IP Rules > Add > IP Policy
2. Specify a suitable name for the rule, for example SAT_HTTP_To_DMZ
3. Now enter:
• Action: Allow
• Source Interface: any
• Source Network: all-nets
• Destination Interface: core
• Destination Network: wan_ip
• Service: http-all
• SAT Translate: Destination IP
• New IP Address: 10.10.10.5
4. Click OK
7.4.8. Protocols Handled by SAT
Chapter 7: Address Translation
602
To Next Page
Loading...
