Product specifications

Chapter 4: System Management Efficient Networks
®
Router family
Technical Reference Guide
Page 4-26 Efficient Networks
®
system selnat addpolicy <remote addr> <remote mask> trans
<public address>
and one that will, based on the destination address, allow the private address to
remain visible. These commands are:
system selnat addpolicy <remote addr> <remote mask> notrans
When policies are created, they are sorted and assigned a policy number on the basis
of the subnet mask. The most specific policy will be number policy 1 and applied first
followed sequentially by the more general policies.
A default policy can be specified that will be applies to all destinations not defined by
other policies. This default policy can provide translation similar to masquerading with
the exceptions of a user defined translation address, the destination address range
can be more narrowly defined, and any other policies would be acted on first, based
on the more specific subnet.
Examples
This command creates the default policy.
system selnat addpolicy 0.0.0.0 0.0.0.0 trans 12.35.10.1
This command creates a policy that will translate the source address of any packets
destined to the subnet 12.16.32.0. to 64.35.6.1.
system selnat addpolicy 12.16.32.0 255.255.255.0 trans 64.35.6.1
This command creates a policy that, for any packets going to the destination address
10.2.2.2, will have no translation performed.
system selnat addpolicy 10.2.2.2 255.255.255.0 notrans
The composite effect of these policies will be: Packets destined to any address in the
subnet 12.16.32.0 will have the source address translated to 64.35.6.1. Packets going
to the destination address 10.2.2.2 will not have any translation done. Packets going
to any destination other than the 12.16.32.0 subnet and 10.2.2.2 will be translated to
12.35.10.1.