R3166-R3206-HP High-End Firewalls NAT and ALG Configuration Guide-6PW101

Configuring dynamic NAT

Select Firewall > NAT Policy > Dynamic NAT from the navigation tree to enter the page shown in Figure

4. In the Dynamic NAT field where all dynamic NAT policies are displayed, click Add to enter the Add

Dynamic NAT page shown in Figure 6.

Figure 6 Add Dynamic NAT page

Table 5 Dynamic NAT configuration items

Item Descri

tion

Interface Specify an interface on which dynamic NAT is to be enabled.

ACL

Specify an ACL for dynamic NAT.

You cannot associate an ACL with multiple NAT address pools, or associate an ACL

with both Easy IP and an address pool.

Address Transfer

Select an address translation mode:

• PAT: Refers to NAPT. In this mode, associating an ACL with an address pool

translates both IP addresses and port numbers.

• No-PAT: Refers to many-to-many NAT. In this mode, associating an ACL with an

address pool translates only IP addresses.

• Easy IP: In this mode, the NAT gateway directly uses an interface’s public IP

address as the translated IP address, and uses an ACL to match IP packets.

Only one mode can be selected for an address pool.

Address Pool Index

Specify the index of a NAT address pool for dynamic NAT.

The NAT address pool must have been configured through NAT address

configuration.

If Easy IP is selected for Address Transfer, you do not need to type an address pool

index.