SANGFOR IAM v2.1 User Manual
89
5.2.1.
SNAT
Provided that a LAN IP address is 192.168.1.0./255.255.255.0, to create a SNAT (source network
address translation) rule to proxy all the LAN users to get access to the Internet, you need to
configure the followings.
Under the default configuration page of [SNAT Rules], click the <Add> button to enter the [Edit
SNAT Rule], as shown below:
Type in a [Rule Name] to name this rule.
Select an [Egress Interface], a specified network interface or select [All WAN interfaces] to which
the data packets are forwarded to.
Select [Source Address], [All] the IP addresses or a [Specified] subnet, which can get access to the
Internet through the IAM gateway. In this example, the configured source address is the subnet
10.251.251.0/255.255.255.0.
Configure [Translate Source IP to], [WAN interface address] or [Specified] IP addresses.
[Specified] requires [Start IP] and [End IP] (they are only required while the IP address and line is
specified for Internet access). Generally, we select [WAN interface address] which means the
source address can access all the public IP addresses through the WAN interface(s).
