Wireless/Redundant Edge Services xl Module Management and Configuration Guide WS.02.xx and greater

1-41
Introduction
ProCurve Wireless Edge Services xl Module
Figure 1-15. Applying ACLs to Interfaces
NAT. NAT, another function the Wireless Edge Services xl Module’s firewall
offers, modifies addresses in packets’ IP headers. The module supports NAT
on both source addresses and destination addresses.
The Wireless Edge Services xl Module has the following capabilities:
■ Dynamic source NAT with port mapping—The module translates
multiple source addresses to a single new address, which is one of the
module’s own IP addresses. Although every NATed packet has the same
new source address, the module assigns each session a different source
port. The module then maintains a table that maps each source port to the
correct original address, allowing the module to forward return traffic to
its destination.