Page 32
Network Address Translation
This section describes how to configure a One-to-One NAT
policy. One-to-One is the most common NAT policy used to
route traffic to an internal server, such as a Web server. Most of
the time, this means that incoming requests from external IP
addresses are
translated
from the IP address of the SonicWALL
security appliance WAN port to the IP address of the internal
Web server. The following example configuration illustrates the
use of the fields in the Add NAT Policy procedure. To add a
One-to-One NAT policy that allows all Internet traffic to be
routed through a public IP address, two policies are needed:
one policy for the outbound traffic, and one policy for the
inbound traffic.
To add the components of a One-to-One NAT policy, perform
the following steps:
1.
Navigate to the
Network
>
NAT
Policies
page. Click
Add
.
The
Add NAT Policy
dialog box displays.
2.
For
Original Source
, select
Any
.
3.
For
Translated Source
, select
Original
.
4.
For
Original Destination
, select
X0 IP
.
5.
For
Translated Destination
, select
Create new address
object
and create a new address object using
WAN
for
Zone Assignment and
Host
for Type.
6.
For
Original Service
, select
HTTP
.
7.
For
Translated Service,
select
Original
.
8.
For
Inbound Interface
, select
X0
.
9.
For
Outbound Interface
, select
Any
.
10. For
Comment
, enter a short description.
11. Select the
Enable NAT Policy
checkbox.
12. Select the
Create a reflexive policy
checkbox if you want
a matching NAT policy to be automatically created in the
opposite direction. This will create the outbound as well as
the inbound policies.
13. Click
Add
.
For more information on creating NAT policies, refer to the
SonicOS Enhanced Administrator’s Guide
.
TZ_210_GSG.book Page 32 Thursday, November 13, 2008 7:41 PM
