Installation guide

Switch Security
6-38
6.6.2.1 Adding a New Static NAT Configuration
If the existing NAT configurations displayed with the Configuration prove unsuitable for translation, consider
creating a new one.
To define a new NAT configuration:
1. Select Security > NAT from the main menu tree.
2. Click on the Static Translation tab.
3. Click the Add button.
4. Define the NAT Type from the drop-down menu. Options include:
• Inside - The set of networks subject to translation. These are the internal addresses you are
trying to prevent from being exposed to the outside world.
• Outside - All other addresses (usually valid addresses located on the Internet). Outside addresses
pose no risk if exposed over a publicly accessible network.
5. Define the NAT Direction from the drop-down menu. Options include:
• Source - The inside network is transmitting data over the network its intended destination. On
the way out, the source IP address is changed in the header and replaced by the (public) IP
address.
• Destination - Packets passing through the NAT on the way back to the switch managed LAN are
searched against to the records kept by the NAT engine. There the destination IP address is
changed back to the specific internal private class IP address to reach the LAN over the switch
managed network.
6. Enter the Local Address used at the local (source) end of the NAT configuration. This address (once
translated) will not be exposed to the outside world when the translation address is used to interact
with the remote destination.
7. Enter the Local Port (1 - 65535) used to for the translation between the switch and its NAT
destination.
8. Use the Protocol drop-down menu to select either TCP or UDP as the protocol.