Configuring Source NAT—Quick Configuration

Address Persistent

Ensures that the router assigns the same IP address from a source pool to a host for multiple concurrent sessions.

Enable Address Persistent.

Pool Utilization Alarm

Turns on pool utilization alarm by configuring alarm thresholds.

Raise Threshold—Enter a number between 50–100 to raise the threshold for the pool utilization alarm.

Clear Threshold—Enter a number between 40–100 to clear the threshold for the pool utilization alarm.

Source Address Pool

Defines one or more source NAT pools.

Click Add.

Source Rule Sets

Defines one or more rule sets.

Click Add.

Name

Descriptive name for the pool.

Type a name for the pool.

Routing Instance

Specify the routing instance to which the pool is bound. By default, the routing instance is inet.0.

Enter the routing instance name.

Host Address Base

Specify the base address of the original source IP address range. This is used for IP shifting.

Enter the IP address.

Port

Specifies whether port translation is performed (default).

Default—Port translation is enabled.

No translation—Disables port translation.

Translation—Enables port translation. Enter a port range.

Overflow

Specifies a source pool to use when the current address pool is exhausted. The pool can be a user-defined pool or an interface’s IP address.

Off—No overflow pool.

Interface—Enter the IP address of the interface.

Pool name—Select a user-defined pool.

Source Addresses

Specifies address prefixes, addresses, or a range of addresses or address prefixes.

Click Add or Delete to configure or remove address entries.

Name

Name of the rule set.

Type a name for the rule set.

From

Specifies where the packet is coming from. If a packet matches more than one rule set, the rule set with the more specific match is used. An interface match is considered more specific than a zone match, which is more specific than a routing instance match.

Routing Instance—Specify the source routing instance.

Interface—Specify the source interface.

Zone—Specify the source zone.

To

Specifies to where the packet is going. If a packet matches more than one rule set, the rule set with the more specific match is used. An interface match is considered more specific than a zone match, which is more specific than a routing instance match.

Routing Instance—Specify the destination routing instance.

Interface—Specify the destination interface.

Zone—Specify the destination zone.

Rules

Set of conditions that are evaluated, in order, for a match to perform the specified source NAT action.

Rule name

Name of the source NAT rule.

Type a name for the rule.

Source address

Specifies the source address to match. You can configure multiple addresses or subnets.

Enter one or more addresses or subnets.

Destination address

Specifies the destination address to match. You can configure multiple addresses or subnets.

Enter one or more addresses or subnets.

Then

Specifies the action of the source NAT rule.

Source nat off—No source NAT is performed.

Source NAT pool—Use the specified pool to perform source NAT.

Source NAT interface—Use the egress interface address to perform source NAT.