Installation guide

Switch Security
6-37
3. Refer to the following information as displayed within the Static Translation tab.
4. Select an existing NAT configuration and click the Edit button to display screen to modify the settings
of this existing NAT configuration. The fields within the Edit screen are similar to those displayed when
adding a new NAT configuration.
5. Select an existing NAT configuration and click the Delete button to remove it from the list of available
configurations displayed.
6. Click the Add button to display screen to create a new NAT configuration and add it to the list of
available configurations. For more information, see
Adding a New Dynamic NAT Configuration on page 6-35.
Type
Displays the NAT type as either:
• Inside - The set of networks subject to translation. These
are the internal addresses you are trying to prevent from
being exposed to the outside world.
• Outside - All other addresses. Usually valid addresses
located on the Internet. Outside addresses pose no risk if
exposed over a publicly accessible network.
Direction Displays the Direction as either:
• Source - The inside network is transmitting data over the
network its intended destination. On the way out, the
source IP address is changed in the header and replaced by
the (public) IP address.
• Destination - Packets passing through the NAT on the way
back to the switch managed LAN are searched against to
the records kept by the NAT engine. There the destination IP
address is changed back to the specific internal private
class IP address to reach the LAN over the switch managed
network.
Protocol Applies NAT on packets matching the specified IP protocol. Valid
values can only be tcp or udp.
Local Address Applies NAT on packets matching the specified IP address. The
NAT engine matches the source IP or destination IP based on the
direction specified. This option is valid only if the direction
specified is destination.
Local Port Applies NAT on packets matching the specified port number. The
port number matched can be either source or destination based on
the direction specified. This option is valid only if the direction
specified is destination.
Global Address Modifies the IP address of the matching packet to the specified
value. The IP address modified can be either source or destination
based on the direction specified.
Global Port Modifies the port number of the matching packet to the specified
value. This option is valid only if the direction specified is
destination.