Foundry/configure# firewall corp, Foundry/configure – Foundry Networks AR3202-CL User Manual

Page 285

Advertising
background image

Foundry AR-Series Router User Guide

15 - 60

© 2004 Foundry Networks, Inc.

June 2004

Figure 15.8

Mapping Multiple NAT Addresses to One Public IP Address

There are two methods to configure Port Address Translation (PAT) on the Foundry gateway. In the first method,
specify the IP address to the

nat-ip

parameter in the

policy

command. In the second method, create a pool

of type PAT and then attach it to the policy.

In PAT, multiple hosts can share the same IP address.

The PAT configuration shown in Figure 15.8 includes:

Private network address: 10.1.1.1—10.1.1.3

PAT address: 50.1.1.5

Method:1 – Specifying NAT address with the policy command

To configure this method of PAT, add the policy with the source IP address range, then specify the

nat-ip

address in the

policy

command:

Method:2 – Attaching nat pool to the policy

To configure the second type of NAT, create a NAT pool with type

pat

and specify the IP address. Then add the

policy with the source IP address range. Finally, attach the NAT pool to the policy.

OPAL

50.1.1.5

INTERNET

10.1.1.3

10.1.1.2

10.1.1.1

Foundry/configure# firewall corp

Foundry/configure/firewall corp# policy 2 out address 10.1.1.1

10.1.1.3 any any nat-ip 50.1.1.5
Foundry/configure/firewall corp/policy 2 out#

exit 2

Foundry/configure#

Advertising
This manual is related to the following products: