Understand Firewall NAT Server & Source NAT Using the WEB - In Practice

Created: Dec 29, 2021 00:12:14Latest reply: Feb 23, 2022 06:45:50 342 21 22 0 1

Understand Firewall NAT Server & Source NAT Using the WEB - In Practice

Hello guys!

Today, I would like to present an introduction to Firewall NAT Server & Source NAT in practice.

About This Experiment

After NAT is configured on the firewall connecting an intranet to the Internet, multiple users on the intranet can access the Internet at the same time by using a small number of public IP addresses. In addition, users on the Internet can access the intranet server through specific IP addresses.

Objectives:

Understand the application scenario and mechanism of Source NAT.
Understand the application scenario and mechanism of NAT Server.
Configure NAT Server and Source NAT on the WEB and web UI.

Experiment Networking

Figure 1 - Topology for configuring NAT Server and Source NAT on a firewall

Experiment Planning

Configuration Procedure on the Web UI

Step 1 Configure interfaces on the USG.

Choose Network > Interface. Click edit next to the interface to be configured. Set parameters, and then click OK. The following figure shows the configuration of GigabitEthernet1/0/6.

The configuration of GigabitEthernet1/0/5 is similar.

Step 2 Configure a security policy on the USG to permit packets from the Trust zone to the Untrust zone.

Choose Policy > Security Policy > Security Policy. Click Add. Set the parameters one by one. Click OK. The following figure shows the security policy that permits packets from the Trust zone to the Untrust zone.

Step 3 Configure a NAT address pool. The public IP addresses range from 2.2.2.2 to 2.2.2.5.

Choose Firewall > NAT > Source NAT. Click the Source Translation Address Pool tab. Click +. The following figure shows the configuration. After the configuration is complete, click OK.

Step 4 Configure a NAT policy.

Choose Policy > NAT Policy > Source NAT. Click the Source NAT tab. In Source NAT Policy List, click +. Set the parameters shown in the following figure and click OK.