[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

Configuring Full-Cone NAT

To configure full-cone NAT, you must define a NAT pool that specifies the address to be used for network address translation. Next, you must define a NAT rule and then apply this rule to an interface. Each NAT rule consists of a set of terms that contain match conditions and actions. For a description of NAT match conditions and actions, see NAT Components.

The example in this section shows a full-cone NAT configuration with source static processing. It shows how to create the pool nat-pool and define the rule nat-rule for full-cone NAT.

To configure full-cone NAT:

  1. Navigate to the top of the configuration hierarchy in either the J-Web or CLI configuration editor.
  2. Perform the configuration tasks described in Table 89.
  3. Apply the NAT configuration to an interface. See Applying NAT to an Interface.

Table 89: Configuring Full-Cone NAT with Source Static Processing

Task

J-Web Configuration Editor

CLI Configuration Editor

Navigate to the Nat level in the configuration hierarchy.
  1. In the J-Web interface, select Configuration>View and Edit>Edit Configuration.
  2. Next to Services, click Configure or Edit.
  3. Next to Nat, click Configure or Edit.

From the [edit] hierarchy level, enter

edit services nat

Define static-pool and assign it an address range to be used for network address translation.
  1. Next to Pool, click Add new entry.
  2. In the Pool Name box, type static-pool.
  3. Next to Address range, click Add new entry.
  4. In the High box, type 10.200.253.5.
  5. In the Low box, type 10.200.253.1.
  6. Click OK twice.

Set the NAT pool name and the address range:

set pool static-pool address-range low 10.200.253.1 high 10.200.253.5

Define nat-rule, nat-term, and specify that NAT type is full-cone.
  1. On the Nat page, next to Rule, click Add new entry.
  2. In the Rule name box, type static-nat-rule.
  3. Next to Term, select Add new entry.
  4. In the Term name box, type nat-term.
  5. From the Nat type list, select full-cone.

Set the rule name and its NAT type:

set rule static-nat-rule term nat-term nat-type full-cone

Specify the source address range.
  1. On the Rule page, next to From, select Configure.
  2. On the Term page, next to Source address range, select Add new entry.
  3. In the High box, type 10.100.136.5.
  4. In the Low box, type 10.100.136.1.
  5. Click OK.

Set the source address range:

set rule static-nat-rule term nat-term from source-address-range 10.100.136.1 10.100.136.5

Specify the Then action of the rule.
  1. On the Rule page, next to Then, select Configure.
  2. On the Term page, from the Designation list, select Translated.
  3. Next to Translated, select Configure.
  4. Next to Translation type, click Configure.
  5. From the Source pool choice list, select Source pool.
  6. In the Source pool box, type static-nat-range.
  7. Next to Translation type, select Configure.
  8. On the Translated page, from the Source list, select static.
  9. Click OK.

Set the Then action:

set rule static-nat-rule term nat-term then translated source-pool static-nat-range

[ Contents] [ Prev] [ Next] [ Index] [ Report an Error]

[an error occurred while processing this directive]