User guide

Network address translation - NAT NAT command reference
iMG/RG Software Reference Manual (IPNetwork Functions)
4-144
IKE establishes a shared security policy and authenticates keys for services that require
keys, such as IPSec. Before any IPSec traffic can be passed, each router/firewall/host must
verify the identity of its peer. This can be done by manually entering pre-shared keys into
both hosts or by a CA service.
Options The following table gives the range of values for each option that can be specified with
this command and a Default Value (if applicable).
Example --> nat iketranslation cookies
4.4.5.1.7 NAT LIST GLOBALPOOLS
Syntax NAT LIST GLOBALPOOLS <interfacename>
Description This command lists the following NAT address pool information for a specific outside
interface:
• Address pool identification number
• Address pool name
• Type of inside interface (internal or DMZ)
• Subnet status (true or false)
• IP address - the outside network IP address or the first address in the range of net-
work pool addresses
• Mask/End Address - the outside subnet mask of the outside network IP address or
the last address in the range of network pool addresses
Options The following table gives the range of values for each option that can be specified with
this command and a Default Value (if applicable).
Option Description Default Value
cookies Source port will not be translated for IKE packets; IKE cook-
ies are used to identify IKE sessions.
Ports
ports Source port will be translated for IKE packets.