- Foundry Router User Guide

Foundry AR-Series Router User Guide
15 - 60 © 2004 Foundry Networks, Inc. June 2004
Figure 15.8 Mapping Multiple NAT Addresses to One Public IP Address
There are two methods to configure Port Address Translation (PAT) on the Foundry gateway. In the first method,
specify the IP address to the
nat-ip parameter in the policy command. In the second method, create a pool
of type PAT and then attach it to the policy.
In PAT, multiple hosts can share the same IP address.
The PAT configuration shown in Figure 15.8 includes:
• Private network address: 10.1.1.1—10.1.1.3
• PAT address: 50.1.1.5
Method:1 – Specifying NAT address with the policy command
To configure this method of PAT, add the policy with the source IP address range, then specify the nat-ip
address in the policy command:
Method:2 – Attaching nat pool to the policy
To configure the second type of NAT, create a NAT pool with type pat and specify the IP address. Then add the
policy with the source IP address range. Finally, attach the NAT pool to the policy.
OPAL
50.1.1.5
INTERNET
10.1.1.3
10.1.1.2
10.1.1.1
Foundry/configure# firewall corp
Foundry/configure/firewall corp# policy 2 out address 10.1.1.1
10.1.1.3 any any nat-ip 50.1.1.5
Foundry/configure/firewall corp/policy 2 out#
exit 2
Foundry/configure#