Chapter18 Network Address Translation
Network Address Translation Rules
18-24
Cisco Router and Security Device Manager Version 2.2 User’s Guide
OL-4015-08
Note If you create a NAT rule that would translate addresses of devices that are part of
a VPN, SDM will prompt you to allow it to create a route map that protects those
addresses from being translated by NAT. If NAT is allowed to translate addresses
of devices on a VPN, their translated addresses will not match the IPSec rule used
in the IPSec policy, and traffic will be sent unencrypted.
Direction
Select the traffic direction to which this rule applies.
From inside to outside
Select this option if you want to translate private addresses on the LAN to legal
addresses on the Internet or on your organization’s intranet. You may want to
select this option if you use private addresses on your LAN that are not globally
unique on the Internet.
This help topic describes how the remaining fields are used when From inside to
outside is chosen.
Translate from Interface
This area shows the interfaces from which packets needing address translation
may arrive. It provides fields for you to specify the IP address of a single host, or
a network address and subnet mask that represent the hosts on a network.
Inside Interface(s)
If you chose From inside to outside for Direction, this area contains the
designated inside interfaces.
Note If this area contains no interface names, close the Add Address Translation Rule
window, click Designate NAT interfaces in the NAT window, and designate the
router interfaces as inside or outside. Then return to this window and configure
the NAT rule.