
NAT Configuration Examples
10.4.1 Dynamic NAT (many to many)
In dynamic
If a NAT IP address cannot be allocated dynamically at the connection creation time, the packet would be dropped.
Figure 19 Dynamic NAT
10.1.1.1 |
INTERNET |
10.1.1.2 |
10.1.1.3 |
10.1.1.4 |
The dynamic NAT configuration shown in Figure 19 includes:
Private network
Public (NAT) IP address range:
To create NAT pool with type dynamic, specify the IP address and the NAT ending IP address.Then add a policy with the source IP address range, and attach the NAT pool to the policy.
Blackbox/configure> firewall corp Blackbox/configure/firewall corp> object Blackbox/configure/firewall corp/object>
dynamic 60.1.1.1 60.1.1.2 Blackbox/configure/firewall corp/object> exit
Blackbox/configure/firewall corp> policy 8 out | address 10.1.1.1 |
10.1.1.4 any any |
|
Blackbox/configure/firewall corp/policy 8 out> | |
| |
Blackbox/configure/firewall corp/policy 8 out> | exit 2 |
Blackbox/configure> |
|
75