. . . . .
A D D R E S S T R A N S L A T I O N
Destination NAT Configurations
Version 3R2
Security Appliance User Guide
10-7
set policy from {zone} to {zone} {src_addr} (dst_grp}
{port} nat dst ip {nat_addr} permit
CONFIGURING DESTINATION NAT: MANY-TO-ONE WITH PORT
MAPPING
Use the
set policy
command with the
nat dst ip
and
port
options to
specify destination NAT from an address group and port to a single
address and port:
set policy from {zone} to {zone} {src_addr} (dst_addr}
{port} nat dst ip {nat_addr} port {prt_nbr} permit
CONFIGURING DESTINATION NAT: MANY-TO-MANY
Use the
set policy
command with the
nat dst ip
option to specify
destination NAT that translates a group of destination addresses to an
address from a specified address range:
set policy from {zone} to {zone} {src_addr} (dst_grp}
{port} nat dst ip {nat_addr_begin} {nat_addr_end} permit
The NAT address range is specified by
nat_addr_begin
and
nat_addr_end
.
Destination NAT in a many-to-many configuration employs address
shifting to translate the first destination address in an address range to
