Watchguard Firebox X1000, User Manual

Page: 133 / 314

Using 1-to-1 NAT
User Guide 111
A one-to-one mapping exists between each NAT address
and the forwarded (real) IP address: 210.199.6.0 becomes
192.168.69.0.
From Policy Manager:
1
Select Setup => NAT .
The NAT Setup dialog box appears.
2
Click Advanced .
The Advanced NAT Settings dialog box appears.
3 Click the 1-to-1 NAT Setup tab.
4 Select the checkbox marked Enable 1-1 NAT .
5 Click Add .
The 1-1 Mapping dialog box appears, as shown in the following
figure.
6
Select the appropriate interface (external, trusted,
optional, or IPSec).
7 Enter the number of hosts to be translated.
8 In the NAT base field, enter the base address for the
exposed NAT range.
This will generally be the public IP address that will appear
outside the Firebox.
9
In the Real base field, enter the base address for the
real IP address range. Click OK .
This will generally be the private IP address directly assigned to
the server or client.
10
Click the Dynamic NAT Exceptions tab.
You must make dynamic NAT exceptions for any internal address
being used for 1-to-1 NAT; otherwise, the address will be
translated using dynamic NAT instead of 1-to-1 NAT.
11
Click Add .
The Add Exception dialog box appears.