Dynamic NAT Configuration

Dynamic NAT configurations translate the IP address of packets going out from one interface to another interface based on configured conditions. Dynamic NAT requires packets be switched through a NAT router to generate translations in the translation table.

To add or edit dynamic NAT settings:

  1. Select the Dynamic NAT tab.
    Click to expand in new window
    Profile Security - Dynamic NAT tab
  2. Refer to the following to determine whether a new dynamic NAT configuration needs to be created, or whether an existing one can be edited or deleted:

    Source List ACL

    Lists an ACL to define the packet selection criteria for the NAT configuration. NAT is applied only on packets which match a rule defined in the access-list. These addresses (once translated) are not exposed to the outside world when the translation address is used to interact with the remote destination.


    Displays Inside or Outside NAT as the network direction for the dynamic NAT configuration.

    ACL Precedence

    Lists the administrator-assigned priority set for the listed source list ACL. The lower the value listed, the higher the priority assigned to this ACL rule.


    Lists the VLAN (from 1 - 4094) used as the communication medium between the source and destination points within the NAT configuration.

    Overload Type

    Displays the overload type used when several internal addresses are NATed to only one or a few external addresses. Options include NAT Pool, One Global Address and Interface IP Address. The default setting is Interface IP Address.

    NAT Pool

    Displays the name of an existing NAT pool used with the dynamic NAT configuration.

    Overload IP

    If One Global IP Address is selected as the Overload Type, define an IP address to use as a filter address for the IP ACL rule.

  3. To modify an existing dynamic NAT configuration, select it and click Edit. To remove an existing configuration, select it and click Delete.