Patton OnSite 2603, Руководство пользователя

Страница: 78 / 131

Introduction to NAT 78
Models 2603, 2621, and 2635 User Manual 7 • Security
1.
Go to the “Security Interface Configuration” page by clicking on Security under Configuration in the
menu.
2.
Click on Enable NAT to internal interfaces in the Security Interfaces table. NAT is now enabled between
the internal (LAN) and the external (WAN) interfaces of the firewall.
Global address pool and reserved map
1.
Click on Advanced NAT Configuration... on the web page, “Security Interface Configuration.”
2.
Click on the hyperlink Add Global Address Pool ... The global IP addresses need to be created and put into
the Global Address Pool.
3.
Set the parameters to the following values (See figure 53 .):
– Interface Type: internal
– Use Subnet Configuration: Use IP Address Range
– IP Address: 100.100.100.101
– Subnet Mask/ IP Address 2 : 100.100.100.102
Click on Add Global Address Pool button.
Figure 53. NAT Global Address Pool configuration
4.
Next, create a reserved mapping between a global IP address from the global pool and a PC on the side of
the internal interface (’ip1’). In this example, 10.10.19.11.
5.
Click on the hyperlink
Add Reserved Mapping...
6.
Set the parameters to the following values (See figure 54 .):
– Global IP Address: 100.100.100.101
– Internal IP address: 10.10.19.11
– Transport Type: all
– Port Number: 65535(This port number means all port numbers for TCP or UDP protocols will be
mapped.)
7.
Click on Add Reserved Mapping .