TMS zl Management and Configuration Guide ST.1.2.100916

5-18
Network Address Translation
Configuring NAT Policies
• Select Use IP of routed VLAN interface to have the TMS zl Module
translate each source address to an IP address on one of its TMS
VLANs.
The module uses the IP address on the TMS VLAN that is the forward-
ing interface for each packet’s destination. In this way, source
addresses are always translated to a valid IP address in the destination
address.
10. Optionally, for Insert Position (Optional), type a priority for the policy.
11. Click OK.
12. If necessary, create a firewall access policy with the same source and
destination zones as the NAT policy you just created and that permits the
same services and addresses. (See “Firewall Access Policies for NAT” on
page 5-23.)
13. Click Save.
Note The TMS zl Module’s stateful-firewall automatically translates return traffic
back to the correct addresses. You do not need to create destination NAT
policies unless devices in the destination zone need to initiate contact with
services in the source zone.
Destination NAT Policies
To add a destination NAT policy, follow these steps:
1. Click Firewall > NAT Policies > Policies.
2. Click Add Policy.
3. For Translate, select Destination.