NAT setup
An administrator can add and configure NAT policies to perform address translations. Depending upon the routing within
the environment and the appliance, it may be important to perform the NAT setup as traffic arrives (pre-routing) or as the
traffic exits (post-routing).
PARAMETER
DEFINITION
Direction
Direction of traffic flowing into/out of the interface performing NAT.
Order
From top to bottom, traffic is compared to the entries of the NAT policy looking for a pattern match.
Interface
This is the interface where traffic will be inspected for traffic pattern matching and also the interface where the NAT will be performed.
Source
The source host/network listed here is inspected for traffic pattern matching.
Destination
The destination host/network listed here is inspected for traffic pattern matching.
Service
The service listed here is inspected for traffic pattern matching.
Translated
source
The host/interface address to replace the source value shown in the traffic that matches this NAT policy pattern. If the destination
address is not intended to be translated, then type any in this field.
Translated
destination
The host/interface address to replace the destination value shown in the traffic that matches this NAT policy pattern. If the destination
address is not intended to be translated, then type any in this field.
Translated
service
The destination service (TCP/UDP port) to replace the value shown in the traffic that matches this NAT policy pattern. If the
destination port is not intended to be translated, then type any in this field.
Table 6.7 NAT Setup Definitions
To add a NAT Policy:
1.
From the sidebar, click
Firewall and NAT
, then click the
Policy
tab.
2.
In the NAT Setup section, under the Add a NAT Policy heading, you can add a NAT policy by use the drop-
down menu to select either Outgoing or Incoming under Direction.
3.
Enter valid names for the following: Interface, Source, Destination, Service, Translated Source, Translated
Destination and Translated Service.
NOTE: Valid names must be between 3 and 40 alphanumeric characters.
4. Use the drop-down menu to either activate or deactivate the Rule State.
5.
Click
Apply
. The new NAT Policy will appear under the Defined NAT Policies heading.
To modify or delete a NAT Policy:
1.
From the sidebar, click
Firewall and NAT
, then click the
Policy
tab.
2.
Under the Defined NAT Policies heading, check the box next to the policy you want to edit or delete.
3.
Make inline changes to the row you want to edit and click
Apply
.
-or-
Click
Delete
to delete the policy.
Firewall setup
By default, the appliance is pre-populated with system-defined firewall policy rules that support appliance features. An
administrator can create additional firewall policy rules to either relax or strengthen the appliance's default security state.
PARAMETER
DEFINITION
Direction
Direction of traffic flowing into/out of the interface performing NAT.
Order
From top to bottom, traffic is compared to the entries of the NAT policy looking for a pattern match.
Table 6.8 Firewall Setup Definitions
Vertiv
| Avocent® Universal Management Gateway Appliance Installer/User Guide |
82
