Black Box LR1104A-T1/E1, LR1112A-T1/E1, LR1114A-T1/E1, LR1102A-T1/E1 manual Static NAT one to one

Black Box LR11xx Series Router Configurations Guide

10.4.2 Static NAT (one to one)

Figure 20 Static NAT

10.1.1.1
	OPAL
	INTERNET
10.1.1.2	50.1.1.1-50.1.1.3
10.1.1.3

In static (one-to-one) NAT type, for each IP address in the corporate network, one NAT IP address will be used. For example, for the three IP addresses from 10.1.1.1 to 10.1.1.3, there is a set of three NAT IP address from 50.1.1.1 to 50.1.1.3. In case of one-to-one NAT, only IP address translation takes place, that is, if a packet travels from 10.1.1.1 to yahoo.com, the Black Box-Firewall only substitutes the source address in the IP header with the NAT IP address. The source port will be the same as the original.

The static NAT configuration shown in Figure 20 includes:

„

„

Private network address:10.1.1.1—10.1.1.3

Public (NAT) IP address range: 50.1.1.1—50.1.1.3

To create NAT pool with type static, specify the IP address and the ending NAT IP address. Add a policy with source IP address range and attach NAT pool to the policy.

Blackbox/configure> firewall corp Blackbox/configure/firewall corp object Blackbox/configure/firewall corp/object> nat-pool addresspoolStat

static 50.1.1.1 50.1.1.3 Blackbox/configure/firewall corp/object> exit

Blackbox/configure/firewall corp> policy 7 out	address 10.1.1.1
10.1.1.3 any any
Blackbox/configure/firewall corp/policy 7 out>	apply-object
nat-pool addresspoolStat
Blackbox/configure/firewall corp/policy 7 out>	exit 2
Blackbox/configure>

76