Watchguard Firebox X1000, Руководство пользователя

Страница: 129 / 314

Using Service-Based Dynamic NAT
User Guide 107
Enabling service-based dynamic NAT
Service-based NAT is not dependent on enabling simple
dynamic NAT. From Policy Manager:
1 Select Setup => NAT . Click Advanced .
2
Select the checkbox marked Enable Service-Based
NAT .
3
Click OK to close the Advanced NAT Settings dialog
box. Click OK to close the NAT Setup dialog box.
Configuring service-based dynamic NAT
By default, services take on whatever dynamic NAT prop-
erties you have set for simple NAT. However, you can
override this setting in the service’s
Properties dialog box.
You have three options:
Use Default (Simple NAT)
Service-based NAT is not enabled for the service.
The service uses the simple dynamic NAT rules
configured in the
Dynamic NAT Entries list, as
explained in “Adding simple dynamic NAT
entries” on page 104.
Disable NAT
Disables dynamic NAT for outgoing packets using
this service. Use this setting to create service-by-
service exceptions to outgoing NAT.
Enable NAT
Enables service-based dynamic NAT for outgoing
packets using this service regardless of how the
simple dynamic NAT settings are configured.
From Policy Manager:
1
Double-click the service icon. Click Outgoing .
2
Use the Choose Dynamic NAT Setup drop-down list
to select either the default (simple dynamic NAT),
disable, or enable setting. Click
OK .