User guide

Traffic Management
168 Firebox X Edge e-Series
Add a secondary external IP address for 1-to1 NAT mapping
1. To connect to the System Status page, type https:// in the browser address bar, and the IP address
of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Firewall > NAT.
The NAT (Network Address Translation) page appears.
3. Type a public IP address from the external network and a private IP address from the trusted or
optional network, then click Add.
The Firebox X Edge maps the private IP address you typed to the secondary external IP address. You can create up
to eight (8) IP address pairs for 1-to-1 NAT.
4. Click Submit to save your changes.
Add or edit a policy for 1-to-1 NAT
1. To connect to the System Status page, type https:// in the browser address bar, and the IP address
of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Firewall > Incoming.
The Filter Incoming Traffic page appears.
3. Adjacent to an existing policy you want to change, click Edit.
To add a custom packet filter or proxy policy, click Add Packet Filter Policy or Add Proxy Policy.
4. On the Incoming tab, select 1-to-1 NAT from the Policy Host drop-down list. If you have more than
one secondary external IP address configured, select the IP address pair you want to associate with the
policy from the adjacent drop-down list.
5. If this is an existing policy, click Submit.
If this is a new custom packet filter or proxy policy, use the instructions in Filter incoming traffic for a
custom policy or Add or Edit a Proxy Policy to configure the other settings.
Enable secondary addresses
1. To connect to the System Status page, type https:// in the browser address bar, and the IP address
of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Firewall > NAT.
The NAT (Network Address Translation) page appears.
3. Select the Enable secondary IP addresses check box.
4. Click Submit. 1-to-1 NAT is now enabled.
Add or edit a policy for 1-to-1 NAT
1. To connect to the System Status page, type https:// in the browser address bar, and the IP address
of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Firewall > Incoming.
The Filter Incoming Traffic page appears.
3. Adjacent to an existing policy you want to change, click Edit.
To add a custom packet filter or proxy policy, click Add Packet Filter Policy or Add Proxy Policy.
4. On the Incoming tab, select 1-to-1 NAT from the Policy Host drop-down list. If you have more than
one secondary external IP address configured, select the IP address pair you want to associate with the
policy from the adjacent drop-down list.
5. If this is an existing policy, click Submit.
If this is a new custom packet filter or proxy policy, use the instructions in Filter incoming traffic for a
custom policy or Add or Edit a Proxy Policy to configure the other settings.