
Black Box LR11xx Series Router Configurations Guide
translation takes place, i.e., if a packet travels from 10.1.1.1 to yahoo.com, Black
If a NAT IP address cannot be allocated dynamically at the connection creation time, the packet would be dropped.
Figure 25 Dynamic NAT
10.1.1.1
10.1.1.2
INTERNET
10.1.1.3
10.1.1.4
The dynamic NAT configuration shown in Figure 25 includes:
Private network
Public (NAT) IP address range:
To create NAT pool with type dynamic, specify the IP address and the NAT ending IP address.Then add a policy with the source IP address range, and attach the NAT pool to the policy.
Blackbox/configure> firewall corp
Blackbox/configure/firewall corp> object
Blackbox/configure/firewall corp/object>
60.1.1.1 60.1.1.2
Blackbox/configure/firewall corp/object> exit
Blackbox/configure/firewall corp> policy 8 out address 10.1.1.1 10.1.1.4 any any Blackbox/configure/firewall corp/policy 8 out>
addresspoolDyna
Blackbox/configure/firewall corp/policy 8 out> exit 2
Blackbox/configure>
86