Watchguard Firebox X1000, User Manual

Page: 131 / 314

Configuring a Service for Incoming Static NAT
User Guide 109
vice. See the following FAQ before configuring static NAT
for a service:
https://support.watchguard.com/advancedfaqs/nat_outin.asp
1 Double-click the service icon in the Services Arena.
The service’s Properties dialog box appears displaying the
Incoming tab.
2
Use the Incoming drop-down list to select Enabled
and Allowed .
To use static NAT, the service must allow incoming traffic.
3
Under the To list, click Add .
The Add Address dialog box appears.
4
Click NAT .
The Add Static NAT dialog box appears, as shown in the
following figure.
5 Use the External IP Address drop-down list to select
the “public” address to be used for this service.
If the public address does not appear in the drop-down list, click
Edit to open the Add External IP dialog box and add the public
address.
6
Enter the internal IP address.
The internal IP address is the final destination on the Trusted
network.
7 If appropriate, select the checkbox marked Set internal
port to different port than service .
This feature is rarely required. It enables you to redirect packets
not only to a specific internal host but also to an alternative port.
If you select the checkbox, enter the alternative port number in
the Internal Port field.
8
Click OK to close the Add Static NAT dialog box.
The static NAT route appears in the Members and Addresses list.
9 Click OK to close the Add Address dialog box. Click
OK to close the services’s Properties dialog box.