Specifications

46 MDS Orbit MCR-4G Technical Manual MDS 05-6628A01, Rev. A
Source NAT
Source NAT performs translation of source IP address of the traffic egressing an interface. This is typically
used to provide many-to-one translation (also called masquerading) of a private network behind MCR to
allow hosts on that private network to access a host (say HOST-B) on the public network. (See Figure 21.)
All traffic originating from hosts in the private network will appear to have originated from a single IP
address (the ip address of the public interface of the MCR, typically, cellular interface) from HOST-B’s
point of view. To allow return IP traffic for UDP/TCP connections, to be delivered to right private host, the
MCR also performs source port translation. Therefore, masquerading consists of Network Address and Port
Translation (NAPT).
Invisible place holder
Figure 21. Source NAT Translation of IP Address
Configuring
Configuration Hierarchy
services {
firewall
nat {
source {
rule-set <name> {
rule <id> {
match {
src-address <network/prefix>;
dst-address <network/prefix>;
}
source-nat {
interface;
}
}
}
}
}
}
interfaces {
interface <name> {
nat {
source <name>;
}
}
}