Add a NAT Policy Rule

NAT Policy Rules use source and destination zones, prefixes, ports and protocols. You can directly add policy rules to a simple NAT stack by clicking a simple NAT stack and then clicking
Add Rule
. For advanced stacks, you have to first select a stack, then a policy set within the stack, and then add policy rules to the policy set.
  • Add a NAT policy rule to a simple NAT stack.
    1. Select
      Stacked Policies
      NAT Stacks
      Select a Stack
      Add Rule
    2. Add a source or destination NAT zone.
      • Enter a
        for the NAT policy rule, and enter an optional description and tags.
      • Choose Source or Destination Zone based on the direction of traffic with respective to the ION device. Accordingly the policy rule will be classified under Source Zone Rules or Destination Zone Rules.
      • Select a previously configured NAT zone from the
        NAT Zone
        You can create a new NAT zone by clicking + next to the
        NAT Zone
      • Select an
        between 1-4 for the policy rule.
        An order of 1 indicates the highest priority for the policy rule.
      • (Optional)
        Disable Rule
        if you do want the ION device to disregard this rule.
    3. Configure filters.
      • (Optional)
        On the
        Match Criteria
        screen, select a
        from the drop-down list or enter a number between 1 and 255 for a protocol.
      • (Optional)
        prefixes, choose prefixes from the
        drop-down list.
      • (Optional)
        Enter a start and end port for
        Port Ranges
        . Click
        Add Port Range
        to add additional ports if needed.
        Note that a maximum of 16 port ranges are allowed, and port ranges can only be added for TCP or UDP protocols.
    4. Configure NAT actions.
      On the
      tab, you can configure a maximum of four actions and you can select a NAT Pool per action for every policy rule. Select any of the following NAT actions.
      • No NAT—Select if you do not wish to perform a NAT action on the selected filters. When you specify
        No NAT
        for a policy rule, you cannot specify any of the other NAT actions in that NAT policy rule.
      • Source NAT
      • Destination NAT
      • Static Source NAT
      • Static Destination NAT
      • ALG Disable
  • Add a NAT policy rule to an advanced NAT policy set.
    1. Select
      Stacked Policies
      NAT Sets
      Select a policy set
      Add Rule

Recommended For You