Motorola RFS Series, Справочное руководство системы

Страница: 418 / 590

6-64 Motorola RF Switch System Reference Guide
6.5.3 Configuring NAT Interfaces
The NAT Interface is the VLAN used to route switch data traffic between the source and destination address
locations within the switch-managed network. Any of the default VLANs is available as the NAT interface,
in addition to any other VLANs created. In addition to selecting the VLAN, specify the Inside or Outside NAT
type.
To view and configure a NAT interface:
1. Select Security > NAT from the main menu tree.
2. Click on the Interfaces tab.
3. Refer to the following information as displayed within the Interface tab:
4. To Edit an existing interface, select it from the list of available interfaces and click the Edit button.
An Edit Interface screen displays allowing the user to modify the VLAN and interface type (inside or
outside).
5. If an interface is obsolete or of no use to the NAT translation process, select it and click the Delete
button to remove it from the list of interfaces available
6. If modifying an existing interface is not a valid option, consider configuring a new interface. To define a
new NAT interface:
a. Click the Add button from within the Interfaces tab.
b. Use the Interface drop-down menu to select the VLAN used as the communication medium between
the switch managed network and its destination (within the insecure outside world).
c. Use the Type drop-down menu to specific the Inside or Outside designation as follows:
• Inside - The set of switch-managed networks subject to translation. These are the internal addresses
you are trying to prevent from being exposed to the outside world.
• Outside - All other addresses. Usually these are valid addresses located on the Internet. Outside
addresses pose no risk if exposed over a publicly accessible network.
Interface Displays the VLAN used as the inside or outside NAT type. All defined VLANs are
available from the drop-down menu for use as the interface.
Type Displays the NAT type as either:
• Inside - The set of switch-managed networks subject to translation. These are
the internal addresses you are trying to prevent from being exposed to the
outside world.
• Outside - All other addresses. Usually these are valid addresses located on the
Internet. Outside addresses pose no risk if exposed over a publicly accessible
network.