Filter
Top Products
IP Setup and Network Address Translation 9-7
When you exit this screen the two map lists, Easy-PAT List and Easy-Servers, are created by default and NAT
configuration becomes effective.This will map all your private addresses (0.0.0.0 through 255.255.255.255) to
your public address. These map lists are bound to the Easy Setup Profile. See “Binding Map Lists and Server
Lists” on page 9-20.
This is all you need to do if you want to continue to use a single PAT, or 1-to-many, NAT configuration.
Advanced configuration – Server Lists and Dynamic NAT
You use the advanced NAT feature sets by first defining a series of mapping rules and then grouping them into
a list. There are two kinds of lists -- Map Lists, made up of Dynamic, PAT and Static mapping rules, and Server
Lists, a list of internal services to be presented to the external world. Creating these lists is a four-step
process:
1. Define the public range of addresses that external computers should use to get to the NAT internal
machines. These are the addresses that someone on the Internet would see.
2. Create a List name that will act as a rule or server holder.
3. Create a map or rule that specifies the internal range of NATed addresses and the external range they are
to be associated with.
4. Associate the Map or Server List to your WAN interface via a Connection Profile or the Default Profile.
The three NAT features all operate completely independently of each other, although they can be used
simultaneously on the same Connection Profile.
You can configure a simple 1-to-many PAT (often referred to simply as NAT) mapping using Easy Setup. More
complex setups require configuration using the Network Address Translation item on the IP Setup screen.
An example MultiNAT configuration at the end of this chapter describes some applications for these features.
See “MultiNAT Configuration Example” on page 9-24.
In order to configure the router to make servers on your LAN visible to the Internet, you use advanced features
in the System Configuration screens, described in “IP setup,” below.
Note: There is no implicit binding between the WAN IP interface address and NAT, so you cannot disallow
configuration of NAT simply because the interface is numbered or disallow configuration of the addressing type
(numbered or unnumbered) simply because NAT is enabled.
If the router has a numbered interface, then it is addressable by the IP address. Also, MultiNAT adds the option
of true unnumbered NAT. Traffic delivered to the router on an unnumbered interface which cannot be processed
by NAT is dropped.
IP setup
To access the NAT configuration screens, from the Main Menu navigate to IP Setup:
Main
Menu
System
Configuration
IP
Setup
Network
Protocols Setup