ProSafe Dual WAN Gigabit Firewall with SSL & IPsec VPN FVS336G Reference Manual
4-14 Firewall Protection and Content Filtering
v1.2, June 2008
In the example shown in Figure 4-6, we have configured multi-NAT to support multiple public IP
addresses on one WAN interface. The inbound rule instructs the VPN firewall to host an
additional public IP address (10.1.0.5) and to associate this address with the Web server on the
LAN (at 192.168.1.2). We also instruct the VPN firewall to translate the incoming HTTP port
number (port 80) to a different port number (port 8080).
The following addressing scheme is used in this example:
• VPN firewall FVS336G
– WAN1 primary public IP address: 10.1.0.1
– WAN1 additional public IP address: 10.1.0.5
– LAN IP address 192.168.1.1
• Web server PC on the VPN firewall’s LAN
– LAN IP address: 192.168.1.11
– Port number for Web service: 8080
Figure 4-6