48
MDS Orbit MCR-4G Technical Manual
MDS 05-6628A01, Rev. B
Source NAT configuration on MCR involves following high level steps:
1. Create a source NAT rule-set.
2. Add rule to perform source NAT on the public interface.
3. Apply the source NAT rule-set to the public interface.
Following example describes the step-by-step configuration of an example source NAT rule-set to perform
masquerading on cellular interface of MCR. Change to CLI configuration mode:
1. Enable firewall service, if it is not already enabled.
admin@(none) 19:33:20% set services firewall enabled true
2. Create source NAT rule-set named MASQ.
admin@(none) 19:33:20% set services firewall nat source rule-set MASQ
3. Create rule for masquerading
admin@(none) 19:33:20% set services firewall nat source rule-set MASQ rule 1 source-nat interface
4. Apply this source NAT rule-set to cellular interface.
admin@(none) 19:33:20% set interfaces eth1 nat source MASQ
5. Commit configuration and exit configuration mode.
admin@(none) 19:33:20% commit
admin@(none) 19:33:20% exit
admin@(none) 19:33:20>
Monitoring
At this time there are no commands to monitor traffic statistics for packets being masqueraded by the fire-
wall. This feature might be added in future revisions of firmware.
Destination NAT
Destination NAT performs translation of destination IP address (and, optionally, destination port) of the
traffic ingressing an interface. This is typically used to allow a host on the public network (HOST-B) to
access a service running on a host in the private network (HOST-1). This is also called port forwarding.
