Device Configuration 5 - 149
Figure 5-97 Profile Security - Static NAT screen - Source tab
10. To map a source IP address from an internal network to a NAT IP address click the Add button.
11. Define the following Source NAT parameters.
12. Select the Destination tab to view destination NAT configurations and define packets passing through the NAT on the way
back to the LAN are searched against to the records kept by the NAT engine. The destination IP address is changed back to
the specific internal private class IP address to reach the LAN over the network.
Source IP Enter the address used at the (internal) end of the static NAT configuration. This address
(once translated) will not be exposed to the outside world when the translation address is
used to interact with the remote destination.
NAT IP Enter the IP address of the matching packet to the specified value. The IP address modified
can be either source or destination based on the direction specified.
Network Select Inside or Outside NAT as the network direction. The default setting is Inside.
Select Inside to create a permanent, one-to-one mapping between an address on an
internal network and a perimeter or external network. To share a Web server on a
perimeter interface with the Internet, use static address translation to map the actual
address to a registered IP address. Static address translation hides the actual address of
the server from users on insecure interfaces. Casual access by unauthorized users
becomes much more difficult. Static NAT requires a dedicated address on the outside
network for each host. Inside NAT is the default setting.
To Next Page
Loading...
