Installation manual

Chapter 5: Configuring the CopperJet
5.7.3.1 Configuring NAT global addresses
Global address pools allow you to create a pool of outside network addresses that is visible
outside your network. Before you can configure global addresses, you need to configure
NAT.
If you want to set up a global address pool on your existing NAT enabled interfaces:
From the NAT Security Interfaces table, click on the Advanced NAT Configuration hyperlink
for the interface that you want to add a global pool to.
Click on Add Global Address Pool The Firewall Add Global Address Pool page is displayed:
This page allows you to create a pool of network IP addresses that are visible outside your
network. Add values for the following table entries:
• Interface type; the internal address type that you want to map your
external global IP addresses to. Click on the drop-down list and select
an interface type.
• Use Subnet Configuration; there are two ways to specify a range of IP
addresses. You can either Use Subnet Mask (specify the subnet mask
address of the IP address) or Use IP Address Range (specify the first and
last IP address in the range). Click on the drop-down list and select a
method.
• Type in the IP Address that is visible outside the network.
• Subnet Mask/IP Address 2; the value you specify here depends on the
subnet configuration that you are using. If you chose Use Subnet Mask,
type in the subnet mask of the IP address. If you chose Use IP Address
Range, type in the last IP address in the range of addresses that make
up the global address pool.
Once you have configured the table, click on Add global address pool. The table is
refreshed and the global address pool is added to your NAT configuration.
To delete a global address pool, click on the Delete hyperlink, then click on the Delete
Global Address Pool button.
5.7.3.2 Configuring NAT reserved mapping
Reserved mapping allows you to map an outside security interface or an IP address from a
global pool to an individual IP address inside the network. Mapping is based on transport
type and port number. Before you can configure reserved mapping, you need to configure
NAT. See section
0 Configuring Network Address Translation (NAT)
Page 34