User guide

NAT Configuration
46 (98) EN/LZT 108 6492 R1
April 2003
4 In the Local Address From/To fields, type the same private IP address, or the
lowest and highest IP addresses in a range:
If you type the same IP address in both fields, incoming traffic that matches the
criteria of this rule will be redirected to that IP address.
If you type a range of IP addresses, incoming traffic will be redirected to any
available computer in that range. This option would typically be used for load
balancing, whereby traffic is distributed among several redundant servers.
5 In the Global Address From/To fields, type the public IP address assigned to you
by your ISP.
If you have multiple WAN interfaces, in both fields type the IP address of the
interface to which this rule applies. This rule will not be enforced for data that
arrives on WAN interfaces not specified here.
If you have multiple WAN interfaces and want the rule to be enforced on a range
of them, type the starting and ending IP addresses of the range.
6 Enter a destination port ID (or a range) as criteria for incoming traffic.
Enter a starting and ending port number in the Destination Port From/To fields
if incoming traffic destined for these port types should be redirected to the
address(es) specified in step 3. Or, enter the same addres in both fields.
7 If the publicly accessible LAN computer uses a non-standard port number for the
type of traffic it receives, type the non-standard port number in the Local Port
field.
8 When you have completed entering all information, click the Submit button. A
page appears to confirm the change.
9 Click Close to return to the NAT Configuration page. The new rule should now
be displayed in the NAT Rule table.
10 On the NAT Configuration page, ensure that the Enable radio button is selected.
11 On the NAT Configuration page, click the Submit button. A page appears to
confirm your changes.
12 Select Admin > Commit & Reboot and click Commit to save your changes to
permanent storage.
8.5.3 The BASIC Rule
The BASIC flavor translates the private (LAN-side) IP address to a public
(WAN-side) IP address, like the NAPT rule. However, unlike the NAPT rule, the
BASIC rule do not translate the port number in the packet header; they are passed
through untranslated. Therefore, the BASIC rule does not provide the same level of
security as the NAPT rule.
The figure below shows the fields used for adding a BASIC rule: