Source NAT (one-to-one)
The following figure shows an example of source NAT (SNAT) in which a single “inside” source address is translated to a single “outside” source address. This example has the following characteristics:
- An internal news server, a Network News Time Protocol (NTTP) device, needs to connect to an external news server.
- The external news server accepts connections only from known clients.
- The internal news server does not receive connections from outside the local network.
To configure NAT in this way, perform the following steps in configuration mode.
Create SNAT rule 10.
Apply this rule to packets coming from the 10.0.0.4 address and egressing through the dp0p1p1 interface.
Use 22.214.171.124 as the source address in outgoing packets. Make sure that the translation address is an address defined on the outbound interface if it is part of the connected subnet on that interface. This ensures that the vRouter replies to ARP requests from remote devices for the translation address.
Commit the change.
Show the configuration.