Add a NAT Policy Rule

NAT Policy Rules use source and destination zones, prefixes, ports and protocols. You can directly add policy rules to a simple NAT stack by clicking a simple NAT stack and then clicking
Add Rule
. For advanced stacks, you have to first select a stack, then a policy set within the stack, and then add policy rules to the policy set.
  • Add a NAT policy rule to a simple NAT stack.
    1. Select
      Policies
      Stacked Policies
      NAT
      Simple
      NAT Stacks
      Select a Stack
      Add Rule
      .
    2. Add a source or destination NAT zone.
      • Enter a
        Name
        for the NAT policy rule, and enter an optional description and tags.
      • Choose Source or Destination Zone based on the direction of traffic with respective to the ION device. Accordingly the policy rule will be classified under Source Zone Rules or Destination Zone Rules.
      • Select a previously configured NAT zone from the
        NAT Zone
        drop-down.
        You can create a new NAT zone by clicking + next to the
        NAT Zone
        field.
      • Select an
        order
        between 1-4 for the policy rule.
        An order of 1 indicates the highest priority for the policy rule.
      • (Optional)
        Select
        Disable Rule
        if you do want the ION device to disregard this rule.
    3. Configure filters.
      • (Optional)
        On the
        Match Criteria
        screen, select a
        Protocol
        from the drop-down list or enter a number between 1 and 255 for a protocol.
      • (Optional)
        For
        Source
        and
        Destination
        prefixes, choose prefixes from the
        Prefixes
        drop-down list.
      • (Optional)
        Enter a start and end port for
        Port Ranges
        . Click
        Add Port Range
        to add additional ports if needed.
        Note that a maximum of 16 port ranges are allowed, and port ranges can only be added for TCP or UDP protocols.
    4. Configure NAT actions.
      On the
      Actions
      tab, you can configure a maximum of four actions and you can select a NAT Pool per action for every policy rule. Select any of the following NAT actions.
      • No NAT—Select if you do not wish to perform a NAT action on the selected filters. When you specify
        No NAT
        for a policy rule, you cannot specify any of the other NAT actions in that NAT policy rule.
      • Source NAT
      • Destination NAT
      • Static Source NAT
      • Static Destination NAT
      • ALG Disable
  • Add a NAT policy rule to an advanced NAT policy set.
    1. Select
      Policies
      Stacked Policies
      NAT
      Advanced
      NAT Sets
      Select a policy set
      Add Rule
      .

Recommended For You