Switch Security 6-29

3. Refer to the following information as displayed within the Dynamic Translation tab.

Type

Displays the NAT type as either:

 

Inside - Applies NAT on packets coming in on interfaces marked as inside. These switch

 

 

interfaces should be private networks which are not accessible from outside (public)

 

 

networks.

 

Outside - Applies NAT on packets coming in on interfaces marked as outside. These

 

 

switch interfaces should be public or outside networks which are accessible from

 

 

anywhere on the Internet.

Direction

Displays the Direction as either:

 

Source - The inside network is transmitting data over the network its intended

 

 

destination. On the way out, the source IP address is changed in the header and replaced

 

 

by the (public) IP address.

 

Destination - Packets passing through the NAT on the way back to the switch managed

 

 

LAN are searched against to the records kept by the NAT engine. There the destination IP

 

 

address is changed back to the specific internal private class IP address in order to reach

 

 

the LAN over the switch managed network.

Access List

Defines the packet selection criteria for NAT. NAT is applied only on packets which match a

 

rule defined in the access-list. Only Standard IP and Extended IP Access List can be used.

Interface

Defines the interface through which packets get routed. The source IP address and source

 

port number (only if IP protocol is TCP or UDP) of packets is changed to the interface IP

 

address and a random port number.

4.Select an existing NAT configuration and click the Edit button to display screen used to modify the settings of this existing NAT configuration. The fields within the Edit screen are similar to those displayed when adding a new NAT configuration.

5.Select an existing NAT configuration and click the Delete button to remove it from the list of available configurations displayed.

Page 253
Image 253
Motorola WS5100 manual Type Displays the NAT type as either, Networks, Anywhere on the Internet, By the public IP address