User's Manual

Avaya Branch Gateway Manager 10.0 Page 374
15-601011 Issue 29r (Friday, November 02, 2012)B5800 Branch Gateway
5.16.3 Static NAT
The Static NAT table allows the firewall to perform address translation between selected internal and external IP
addresses. Up to 64 internal and external IP address pairs can be added to the Static NAT section of a Firewall Profile.
This feature is intended for incoming maintenance access using applications such as PC-Anywhere, Branch Gateway
Manager and the Standalone Voice Mail Client. The address translation is used for destinations such a Standalone Voice
Mail server or the system's own LAN1 address.
· If there are any records in the Static NAT settings of a Firewall Profile, each packet attempting to pass through
the firewall must match one of the static NAT pairs or else the packet will be dropped.
· The destination address of incoming packets is checked for a matching External IP Address. If a match is found,
the target destination address is changed to the corresponding Internal IP Address.
· The source address of outgoing packets is checked for a matching Internal IP Address. If a match is found, the
source address is changed to the corresponding External IP Address.
· Even when a static NAT address match occurs, the other settings on the Firewall Profile Standard and
Custom tabs are still applied and may block the packet.
371
372