Hirschmann HiSecOS EAGLE30 - Page 408

Routing > NAT > Double NAT
Routing
408
RM GUI HiSecOS EAGLE20/30
Release 3.0 09/2015
The Double NAT process requires that the NAT router itself responds to ARP
requests from the respective network. To make this happen, turn on the ARP
proxy function on the ingress interface and on the egress interface.
Figure 17: How the Double NAT process works
 To use the NAT process, set up a router interface for each network and
turn on the routing function in the device.
The data packets go through the filter functions of the device in the following
sequence:
192.168.1.8
192.168.1.100
192.168.1.0/24
Ingress
Interface
Egress
Interface
Double NAT
192.168.2.8
192.168.2.100
Proxy ARP
Proxy ARP
Lokale interne IP-Adresse
Local Internal IP Address
Entfernte externe IP-Adresse
Remote External IP Address
Lokale externe IP-Adresse
Local External IP Address
Entfernte interne IP-Adresse
Remote Internal IP Address
192.168.2.0/24