Static NAT Source Configuration

About this task

Static NAT creates a permanent, one-to-one mapping between an address on an internal network and a perimeter or external network. To share a web server on a perimeter interface with the internet, use static address translation to map the actual address to a registered IP address. Static address translation hides the actual address of the server from users on insecure interfaces. Casual access by unauthorized users becomes much more difficult. Static NAT requires a dedicated address on the outside network for each host.

To add or edit a Static NAT source configuration:

Procedure

  1. Select the Static NAT tab.

    The Source tab displays by default and lists existing static NAT configurations. Existing static NAT configurations are not editable, but new configurations can be added or existing ones deleted as they become obsolete.

    Click to expand in new window
    Profile Security - Static NAT screen - Source tab
    GUID-874D8962-157B-43C0-9AB5-3D3162C17FD2-low.png
  2. To map a source IP address from an internal network to a NAT IP address, click Add.
  3. Define the following Source NAT parameters:

    Source IP

    Enter the address used at the (internal) end of the static NAT configuration. This address (once translated) will not be exposed to the outside world when the translation address is used to interact with the remote destination.

    NAT IP

    Enter the IP address of the matching packet to the specified value. The IP address modified can be either source or destination based on the direction specified.

    Network

    Select Inside or Outside NAT as the network direction. The default setting is Inside.

    Select Inside to create a permanent, one-to-one mapping between an address on an internal network and a perimeter or external network. To share a web server on a perimeter interface with the internet, use static address translation to map the actual address to a registered IP address. Static address translation hides the actual address of the server from users on insecure interfaces. Casual access by unauthorized users becomes much more difficult. Static NAT requires a dedicated address on the outside network for each host.
  4. Click OK to save the changes made to the Static NAT Source configuration.

    Click Reset to revert to the last saved configuration.

9036315-02 REV AA