W&T 55211, Руководство пользователя

Страница: 44 / 114

44
W&T
Operation modes and rule configuration
6�3 Mode Standard router with static NAT
The Standard Router mode offers the option of a fixed 1:1
assignment of IP addresses from the corporate intranet at
the Network 1 (yellow) port to IP addresses from the island
network. For this purpose, the Microwall receives additional
secondary addresses from the intranet in addition to the pri-
mary IP address from the intranet. In the translation table for
the Static NAT, these are assigned to the desired hosts in the
island. The secondary IP addresses do not provide access to
Microwall services (WBM, Update, Ping, etc.).
With the help of static NAT, island hosts appear on the intra-
net as if they were members of the local network. Suitable
firewall rules must be configured for communication with the
island hosts. No modification of the intranet-side routing con-
cept is required.
Network 1 (Intranet): 10.20.0.0/16
10.20.0.55
Network 2 (Island): 192.168.1.0/24
192.168.1.1
Host x
IP: 192.168.1.20/24
Host y
IP: 192.168.1.30/24
1
2
Microwall
Host z
IP: 192.168.1.40/24
Host 1
IP: 10.20.0.10/16
10.20.0.60
10.20.0.61
...
192.168.1.20
192.168.1.30
...
Static Address Translation
Standard rules