Configure NAT for External Connections
You only need to configure NAT if the firewall
has an external interface used for connecting to networks outside
of your data center. While NAT is not required, you can use this
procedure to translate private IP addressing in your data center
to public IP addressing outside. Begin setting up NAT by configuring
address translation for traffic entering server inside an EPG in
your data center. Then configure a NAT policy that translates the
source address of outbound traffic from any EPG to the external
interface IP address.
- Configure address translation for traffic entering an EPG in your data center.
- Select and clickAdd.
- Enter a descriptiveNamefor your NAT policy rule.
- SelectOriginal Packetand clickAddunderSource Zone.
- Select the source zone from the drop-down.
- Select the destination zone from theDestination Zonedrop-down.
- SelectAnyfor theSource Address.
- ClickAddunderDestination Addressand enter the external IP address.
- On theTranslated Packettab, select theTranslation TypeunderDestination Address Translation.
- Select an address from theTranslated Addressdrop-down.
- ClickOK.
- Configure address translation for outbound traffic.
- Select and clickAdd.
- Enter a descriptiveNamefor your outbound NAT policy.
- SelectOriginal Packetand clickAddunderSource Zone.
- Select the zone that matches your ACI tenant and VRF.
- Select the external zone from theDestination Zonedrop-down.
- On theTranslated Packettab, select theTranslation TypeunderSource Address Translation.
- Enter additional required address information.
- ClickOK.
- Commityour changes.
