Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

8-33
Configuring Network Address Translation (NAT)
Configuring NAT
Figure 8-20. Add Static Translation Screen
3. In the NAT section, select the Interface Type and Address Type:
a. The Interface Type determines to which interfaces the Wireless Edge
Services xl Module applies the static NAT definition:
– Outside (Public)—incoming traffic on an outside interface
– Inside (Private)—incoming traffic on an inside interface
b. For the Address Type, select Destination—the module translates the
destination IP address in the IP header.
The correct settings depend, of course, on the goal of the NAT configura-
tion and on how you have defined interfaces in your network.
Remember: destination NAT allows client traffic to reach servers at public
IP address, and servers are typically in your wired network. If you define
VLANs for wired servers as outside interfaces, you should define VLANs
for wireless traffic as inside interfaces. Then select Destination for the
Address Type and Inside(Private) for the Interface Type. On the other hand,
you might define VLANs for wireless traffic as outside interfaces. In this
case, select Destination for the Address Type and Outside(Public) for the
Interface Type. In either case, NAT applies to traffic from wireless stations
destined to wired servers.
See the “Static, or One-to-One, NAT” on page 8-8 and “Planning the NAT
Configuration” on page 8-14 for more guidelines on choosing these
settings.