Chapter 5
Setup and Configuration
Section 5.17.13
Managing Masquerade and SNAT Settings
Masquerading and Source Network Address Translation (SNAT) are forms of dynamic Network Address
Translation (NAT). Both hide a subnetwork behind a single public IP address.
Masquerading is used when the ISP provides a dynamic IP address. SNAT is used when the ISP provides a
static IP address.
The following sections describe how to configure and manage masquerade and SNAT settings for a firewall:
•
Section 5.17.13.1, "Viewing a List of Masquerade and SNAT Settings"
•
Section 5.17.13.2, "Adding Masquerade or SNAT Settings"
•
Section 5.17.13.3, "Deleting a Masquerade or SNAT Setting"
Section 5.17.13.1
Viewing a List of Masquerade and SNAT Settings
To view a list of masquerade and SNAT settings, navigate to security » firewall » fwconfig » {firewall} »
fwmasq, where {firewall} is the name of the firewall. If masquerade or SNAT settings have been configured, the
Net Address Translation Main Settings table appears.
Figure 434: Net Address Translation Main Settings Table
If no masquerade or SNAT settings have been configured, add masquerade or SNAT settings as needed. For
more information, refer to
Section 5.17.13.2
Adding Masquerade or SNAT Settings
To add rules for masquerading or SNAT, do the following:
NOTE
Masquerading requires that the IP address being used to masquerade must belong to the router.
When configuring the SNAT address under masquerading, the SNAT address must be one of the IP
addresses on the outbound interface.
1.
Change the mode to Edit Private or Edit Exclusive.
Navigate to security » firewall » fwconfig » {firewall} » fwmasq, where {firewall} is the name of the
2.
firewall.
3.
Click <Add fwmasq> in the menu. The Key Settings form appears.
396
Section 5.17.13.2, "Adding Masquerade or SNAT
Settings".
Managing Masquerade and SNAT Settings
RUGGEDCOM ROX II
User Guide