SonicWALL SuperMassive 9800, Руководство по началу работы

Страница: 41 / 76

SonicWall SuperMassive 9800 Getting Started Guide 41
Configuring NAT Mode Gateway
NAT mode gateway configuration
This section provides an overview of a SonicWall SuperMassive
9800 appliance operating as a single network gateway in NAT
Mode, which is the default mode for a newly configured
SuperMassive 9800. This section is relevant to administrators
following deployment Scenario A: NAT Mode Gateway on page
39 .
No additional configuration is necessary to deploy your
appliance as a single network gateway in Many ‐ to ‐ One NAT
Mode.
About NAT Mode
Network Address Translation (NAT) allows private IP addresses
on internal networks to be mapped to at least one public IP
address on the WAN interface of the SonicWall SuperMassive
9800 appliance. Outbound traffic from the internal network
uses many ‐ to ‐ one NAT address mappings for their LANs,
WLANs, and other internal networks.
All traffic in SonicOS must go through both an access rule and a
NAT policy, a fundamental part of the NAT Mode architecture.
The NAT policy is even used for traffic that needs no IP address
translation, such as traffic traveling between two different LAN
interfaces, traffic on the simplest types of VPNs, or through
Layer 2 Bridged Mode / Transparent Mode configurations.
The SonicWall SuperMassive 9800 ships with the internal
DHCP server active on the LAN port. However, if a DHCP server
is already active on your LAN, the SuperMassive 9800
appliance disables its own DHCP server to prevent conflicts.
As shown in NAT mode gateway configuration , ports X1 and X0
are preconfigured as WAN and LAN, respectively. The
remaining ports (X2 ‐ X23) can be configured to meet the needs
of your network. In NAT mode gateway configuration , certain
interfaces are configured for specific zones:
• X1—WAN
• X0—LAN
SonicWall SuperMassive
SonicWall SuperMassive 9800
CONSOLE
SDHC
MGMT X23 X21
X20 X6 X4
1GE 10GE
X2 X0
X1 X3 X5 X7
X22
B0
B1
ALARM
TEST
PWR 1 PWR 2
X14 X12 X18 X16 X10 X8
X9 X11 X13 X15 X17 X19
80GB
SSD
80GB
SSD
LAN Zone
DMZ Zone
Internet
ISP 1