Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Creating NAT Policies

Use the Create NAT Policy page to create NAT policies.

To create a NAT policy:

  1. Select Configuration > NAT > NAT Policies.

    The NAT Policies page appears.

  2. Click the add icon (+).

    The Create NAT Policy page displays fields required for creating and configuring a NAT policy.

  3. Complete the configuration according to the guidelines provided in Table 1.

    You can associate only a single device or a device cluster with a site.

  4. Click OK to save the changes.

    A NAT policy with the configuration you provided is created.

Table 1: Fields on the Create NAT Policy Page




Enter a unique string of alphanumeric characters, colons, periods, dashes, and underscores. No spaces are allowed and the maximum length is 255 characters.


Enter a description for the policy; the maximum length is 1024 characters.

Manage Auto-Proxy ARP

The Address Resolution Protocol (ARP) protocol translates IPv4 addresses to MAC addresses. Typically, an interface responds with its MAC address only when an ARP request for its IP address is received.

A proxy ARP implies that the same interface will proxy for other IP addresses (that is, respond to ARP requests for other IP addresses).

Managing a proxy ARP automatically enables the selection of an appropriate interface for any address (as part of a NAT rule) that is not an actual interface address. Proxy ARP management applies to translated addresses in a source NAT rule or to a destination address in a destination NAT rule.


When creating a source NAT rule with pool translation, the address pool assigned must be in the same subnet as the outgoing interface selected.


When creating a destination NAT rule, the external WAN interface can be a proxy for another IP address in the same subnet as the original IP address of the interface.

Sites Applied On

Select the sites on which you want to apply the policy in the Available column and move them to the Selected column by clicking the greater-than icon (>).


The Available column lists only those sites that do not have a NAT policy associated with them.

Sequence No.

Click Select Policy Sequence. The Select Policy Sequence page appears, displaying all NAT policies. Select the policy you want to reorder and select Move Policy Up or Move Policy Down to reorder your NAT policy among the existing policies.