SANGFOR IAM v2.1 User Manual
90
If [Advanced Settings] is checked, more settings are seen. Detailed introductions are as follows:
[Destination Address]: Options are [All] and [Specified]. [All] means all the destination IP
addresses, while [Specified] indicates that the destination addresses are the specified ones.
[Destination Address] and [Source Address] can be configured at the same time. If both of them
are configured, only when both of the conditions are satisfied will the source translation (SNAT)
rule will be fulfilled; if only one of the conditions is configured, then only the corresponding
condition needs to be satisfied.
[Protocol]: Options are [All] and [Specified]. [All] indicates all the protocol on which the SNAT
rule is applied; [Specified] is selected and entered when the protocol and line applied are
specified.
Having completed configuring this page, you have to click the <OK> button to save the settings.
Firewall rule [LAN->WAN] has to be configured to allow the data transmission.
5.2.2.
DNAT
If a LAN (local area network) server needs to provide Internet with services, the [DNAT] function
of IAM gateway device has to be configured.
The default configuration page of [DNAT] rule is as shown below:
Provided that a LAN PC (IP address: 10.251.251.61) wants to provide the external network with
WEB services, at port 80, follow the procedures below to configure a DNAT rule:
Under the [DNAT] configuration page, click the <Add> button to enter the [Edit DNAT Rule]
