Static NAT Source Configuration
Static NAT creates a permanent, one-to-one mapping between an address on an internal network and a perimeter or external network. To share a web server on a perimeter interface with the internet, use static address translation to map the actual address to a registered IP address. Static address translation hides the actual address of the server from users on insecure interfaces. Casual access by unauthorized users becomes much more difficult. Static NAT requires a dedicated address on the outside network for each host.
To add or edit a Static NAT source configuration:
-
Select the Static NAT tab.
The Source tab displays by default and lists existing static NAT configurations. Existing static NAT configurations are not editable, but new configurations can be added or existing ones deleted as they become obsolete.
Profile Security - Static NAT screen - Source tab - To map a source IP address from an internal network to a NAT IP address, click Add.
-
Define the following Source NAT parameters:
Source IP
Enter the address used at the (internal) end of the static NAT configuration. This address (once translated) will not be exposed to the outside world when the translation address is used to interact with the remote destination.
NAT IP
Enter the IP address of the matching packet to the specified value. The IP address modified can be either source or destination based on the direction specified.
Network
Select Inside or Outside NAT as the network direction. The default setting is Inside.
Select Inside to create a permanent, one-to-one mapping between an address on an internal network and a perimeter or external network. To share a web server on a perimeter interface with the internet, use static address translation to map the actual address to a registered IP address. Static address translation hides the actual address of the server from users on insecure interfaces. Casual access by unauthorized users becomes much more difficult. Static NAT requires a dedicated address on the outside network for each host.
-
Click OK to save the changes made to the Static
NAT Source configuration.
Click Reset to revert to the last saved configuration.