14.3. Using the NAT Function¶
14.3.1. Referring the NAT Rule¶
Following is the procedure for referring the NAT rule of the integrated network appliance.
1. Click [1] on the Manage Integrated Network Appliance screen.
2. The NAT Rule tab appears.
Refer to the following table (information that can be referred with the NAT Rule tab) for contents to be displayed for each item.
* Information that can be referred with the NAT Rule tab
| Item | Contents to be displayed |
| a | Global rule configured for this integrated network appliance |
| b | Target network of each NAT rule |
| c | Type of each NAT rule (SNAT or DNAT) |
| d | IP address and port number before conversion for each NAT rule (Select “Any” to make all IP addresses and port numbers applicable.) |
| e | IP address and port number after conversion for each NAT rule (Select “Any” to make all IP addresses and port numbers applicable.) |
| f | Protocol for each NAT rule |
| g | Enabling/ disabling each NAT rule |
14.3.2. Using the SNAT Rule¶
14.3.2.1. Adding the SNAT rule¶
Following is the procedure for adding the SNAT rule.
1. Click [1] on the Manage NAT Rule screen.
2. The Add SNAT Rule screen appears. After inputting the necessary parameters, click [2].
* Refer to the following table (input rules applied on the Add SNAT Rule screen) for contents to be input on each item.
* Input rules applied on the Add SNAT Rule screen
| Input field | Input contents | Mandatory/ Optional | Input condition | |
| a | Pulldown menu | This item can be used for selecting the destination network (target network) of the communication to which SNAT setting is applied. | Mandatory | None |
| b | Text box | This item can be used for inputting the source IP address before conversion to which the SNAT setting is applied. | Mandatory | IPv4 address (decimal notation with dots) or IPv4 address subnet |
| c | Text box | This item can be used for inputting the source IP address after conversion to which the SNAT setting is applied. | Mandatory | * Available IP varies depending on the selected target network.
VPN transit: IP address of the interface connected to the VPN transit
Internet transit: IP address of the interface connected to the Internet transit
Server segment: IP address of the IP address block allocated to the server segment
|
| d | Check box | This item can be used for enabling or disabling this rule. | Optional | - |
14.3.2.2. Editing the SNAT rule¶
Following is the procedure for editing the SNAT rule.
1. Click [1] for the SNAT rule to be edited on the NAT Rule tab.
2. The Edit SNAT Rule screen to be edited appears. After inputting the necessary parameters, click [2].
* Refer to ‘Input Rules Applied on the Add SNAT Rule in 13.3.2.1.Adding the SNAT Rule‘ for input rules applied on each item.
3. Confirm that contents are reflected on the list and then click [3].
14.3.2.3. Deleting the SNAT rule¶
Following is the procedure for deleting the SNAT rule.
1. Click [1] for the SNAT rule to be deleted on the NAT Rule tab.
2. The Warning screen appears. Check the warning and then click [2].
3. Confirm that the SNAT rule is deleted and then click [3].
14.3.3. Using DNAT¶
14.3.3.1. Adding the DNAT Rule¶
Following is the procedure for adding the DNAT rule.
1. Click [1] on the NAT Rule tab.
2. The Add DNAT Rule screen appears. After inputting the necessary parameters, click [2].
* Refer to the following table (input rules applied on the Add DNAT Rule screen) for contents to be input on each item.
* Input rules applied on the Add DNAT Rule screen
| Input field | Input contents | Mandatory/ Optional | Input condition | |
| a | Pulldown menu | This item can be used for selecting the source network of the communication to which DNAT setting is applied. | Mandatory | None |
| b | Pulldown menu | This item can be used for selecting the protocol type from TCP, UDP, TCP&UDP, ICMP and Any. | Mandatory | None |
| c | Text box | This item can be used for inputting the source IP address before conversion to which the DNAT setting is applied. | Mandatory | IPv4 address (decimal notation with dots) or IPv4 address subnet
When setting all source IPs, input “Any”.)
|
| d | Text box | This item can be used for inputting the destination port number before conversion. | Mandatory | Half-width digits
When setting all destinations IPs, input “Any”.)
|
| e | Text box | This item can be used for inputting the destination IP address after conversion to which the DNAT setting is applied. | Mandatory | IPv4 address (decimal notation with dots) or IPv4 address subnet
When setting all source IPs, input “Any”.)
|
| f | Text box | This item can be used for inputting the destination port number after conversion. | Mandatory | Half-width digits
When setting all destinations IPs, input “Any”.)
|
| g | Check box | This item can be used for enabling or disabling this rule. | Optional | - |
14.3.3.2. Editing the DNAT rule¶
Following is the procedure for editing the DNAT rule.
1. Click [1] for the DNAT rule to be edited on the Manage NAT Rule screen.
2. The Edit DNAT Rule screen to be edited appears. After inputting the necessary parameters, click [2].
* Refer to ‘Input Rules Applied on the Add DNAT Rule screen in 13.3.3.1.Adding the DNAT Rule‘ for input rule applied on each item.
3. Confirm that contents are reflected on the list and then click [3].
14.3.3.3. Deleting the DNAT rule¶
Following is the procedure for deleting the DNAT rule.
1. Click [1] for the DNAT rule to be deleted on the NAT Rule tab.
2. The Warning screen appears. Check the warning and then click [2].
3. Confirm that the DNAT rule is deleted and then click [3].
