Dynamic NAT

Dynamic NAT translates the IP address of packets from one interface to another interface based on configured conditions. Dynamic NAT requires packets be switched through a NAT router to generate translations in the translation table.

To define a NAT configuration that can be applied to a profile:

1. Select the Dynamic NAT tab.

   

   

2. Refer to the following to determine whether a new Dynamic NAT configuration requires creation, edit or deletion:

   Source List ACL	Lists an ACL name to define the packet selection criteria for the NAT configuration. NAT is applied only on packets which match a rule defined in the access list. These addresses (once translated) are not exposed to the outside world when the translation address is used to interact with the remote destination.
   Network	Displays Inside or Outside NAT as the network direction for the dynamic NAT configuration.
   Interface	Lists the VLAN (between 1 - 4094) used as the communication medium between the source and destination points within the NAT configuration.
   Overload Type	Lists the Overload Type used with the listed IP ACL rule. Options include NAT Pool, One Global Address and Interface IP Address. Interface IP Address is the default setting.
   NAT Pool	Displays the name of an existing NAT pool used with the dynamic NAT configuration.
   Overload IP	Enables the use of one global address for numerous local addresses.
   ACL Precedence	Lists the administrator assigned priority set for the listed source list ACL. The lower the value listed the higher the priority assigned to these ACL rules.

3. To modify an existing dynamic NAT configuration, select it and click Edit. To remove an existing configuration, select it and click Delete.
4. To create a new dynamic NAT configuration, click Add.

   The Source window displays.

   

   Profile Overrides - Security - NAT - Dynamic NAT - Source ACL List Screen

   

5. Set or override the following to define the Dynamic NAT configuration:

   Source List ACL	Select an ACL name to define the packet selection criteria for NAT. NAT is applied only on packets which match a rule defined in the access-list. These addresses (once translated) will not be exposed to the outside world when the translation address is used to interact with the remote destination.
   Network	Select Inside or Outside NAT as the network direction for the dynamic NAT configuration. Inside is the default setting.
   ACL Precedence	Set the priority (from 1 - 5000) for the source list ACL. The lower the value, the higher the priority assigned to the ACL rule.
   Interface	Select the VLAN (from 1 - 4094) or WWAN used as the communication medium between the source and destination points within the NAT configuration. Ensure that the VLAN selected adequately supports the intended network traffic within the NAT supported configuration.
   Overload Type	Define the overload type used when several internal addresses are NATed to only one or a few external addresses. Options include NAT Pool, One Global Address, and Interface IP Address. The default setting is Interface IP Address.
   NAT Pool	Provide the name of an existing NAT pool for use with the dynamic NAT configuration. Note: This option is enabled only if the Overload Type is set or NAT Pool.
   Overload IP	If One Global IP Address is selected as the Overload Type, define an IP address to use as a filter address for the IP ACL rule.

6. Select Add to create a new Dynamic NAT configuration, Edit to modify an existing configuration or Delete to permanently remove a configuration.