Configure Dynamic NATNEW!

Dynamic NAT translates the IP address of packets from one interface to another interface based on configured conditions. Dynamic NAT requires packets be switched through a NAT router to generate translations in the translation table.

Use this procedure to perform any of the following tasks:

  • Configure, edit, or delete Dynamic NAT settings for a device profile
  • Override Dynamic NAT device profile settings for a specific device
  1. Choose from the following actions:
    • If you are in the process of configuring a new profile, proceed to the next step.
    • If you want to configure, edit, or delete Dynamic NAT settings for an existing profile, go to Profiles, select the target profile, then proceed to the next step.
    • If you want to override Dynamic NAT device profile settings for a specific device, go to Devices, select the target device, then proceed to the next step.
  2. Select the NAT tab.
  3. Select the Dynamic NAT tab.
    A list of Dynamic NAT configurations displays in tabular format, if any exist. The total number of Dynamic NAT configurations appears in parentheses. A summary of configuration characteristics—represented by column headings—is provided for each table entry.
  4. See Dynamic NAT Parameters for instructions on setting parameters.
    Table 1. Dynamic NAT Parameters
    Parameter Description

    Source List ACL

    Select an access control list (ACL) policy to define the packet selection criteria for NAT. NAT is applied only on packets that match a rule defined in the ACL. These addresses (once translated) are not exposed to the outside world when the translation address is used to interact with the remote destination.

    If no policy exists, see IPv4 ACL Policy to create one.

    Network

    Select Inside or Outside NAT as the network direction for the dynamic NAT configuration.

    ACL Precedence

    Set a priority value in the range 1–5000 for applying the source list ACL. The lower the value, the higher the priority assigned to the ACL rule.

    Interface

    Select the interface used as the communication medium between the source and destination points within the NAT configuration. Options are:

    • VLAN — Selects a VLAN interface. Select a VLAN ID in the range 1–4094.
      Note: Ensure that the VLAN selected adequately supports the intended network traffic within the NAT supported configuration.
    • WWAN — Selects Wireless WAN interface
    • PPPoE1 — Selects PPP over Ethernet interface

    Overload Type

    Define the overload type used when several internal addresses are NATed to only one or a few external addresses. Options are:

    • NAT Pool
    • One Global Address
    • Interface IP Address

    NAT Pool

    Select the an existing NAT pool for use with the dynamic NAT configuration.

    Note:

    This option is enabled only if the Overload Type is set to NAT Pool.

    Overload IP

    If One Global IP Address is selected as the Overload Type, define an IP address to use as a filter address for the IP ACL rule.
  5. After you have completed configuring the settings, choose from the following actions:
    1. Select Revert to restore default settings or restore the last saved settings.
      Note

      Note

      You cannot restore default settings after applying or saving changes.
    2. Select Apply to commit the configured settings.
      Note

      Note

      This does not permanently save the settings you configured. If you perform a Reload (warm reboot), applied settings will be lost.
    3. Select Save to commit and save the configured settings.
      Note

      Note

      If you do not select Apply or Save, the settings that you configured are not saved when you move away from the configuration window.

9037761-05 Rev AA