Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

8-18
Configuring Network Address Translation (NAT)
Planning the NAT Configuration
To configure static source NAT, you must know:
■ the local address to which the module must apply NAT
■ the global address to which the module should translate the original
address
You can optionally specify a new source port for the translated traffic.
In Figure 8-8, for example, the company wants to conceal the actual IP address
of its Web server—192.168.1.25. The company has also set up its Web server
to use a different port—port 51000. For this implementation, you must con-
figure destination NAT with port translation.
Figure 8-8. Outside Destination NAT with Port Translation on a Sample Network
In Figure 8-8, the VLAN for wireless stations is the inside interface, so the Web
server is an outside device. Therefore you must set up inside destination NAT.
You could alternatively define the Web server’s VLAN as the inside interface,
in which case you would configure outside destination NAT.
When you record the local address for destination NAT, identify the destina-
tion device’s IP address as it appears on the source network. On the wireless
network, the Web server’s IP address appears to be 10.1.1.1. For this sample
network, you would record 10.1.1.1 for the local address, as shown in
Table 8-4.