Virtual Wire Destination NAT Example

Clients in the Untrust zone access the server using the IP address 198.51.100.100, which the firewall translates to 192.0.2.100. Both the NAT and security policies must be configured from the Untrust zone to the Trust zone.
vwire_nat_dest_nat.png
Route on R2:
Destination
Next Hop
198.51.100.100/32
198.51.100.1
vwire_nat_dest_screenshot.png

Related Documentation