Creating NAT Policies
Use the Create NAT Policy page to create NAT policies.
To create a NAT policy:
- Select Configuration > NAT > NAT Policies.
The NAT Policies page appears.
- Click the add icon (+).
The Create NAT Policy page displays fields required for creating and configuring a NAT policies.
- Complete the configuration according to the guidelines
provided in Table 1.Note
You can associate only a single device or a device cluster with a site.
WarningNAT policy restriction for sites—While you can assign one NAT policy to multiple sites, you cannot assign multiple NAT policies to a single site.
- Click OK to save the changes. If you want to discard your changes, click Cancel instead.
A NAT policy with the configuration you provided is created.
Table 1 provides guidelines on using the fields on the Create NAT Policy page.
Table 1: Fields on the Create NAT Policy Page
Field | Description |
|---|---|
Name | Enter a unique string of alphanumeric characters, colons, periods, dashes, and underscores. No spaces are allowed and the maximum length is 255 characters. |
Description | Enter a description for the policy intent; maximum length is 1024 characters. |
Manage Auto-Proxy ARP | The Address Resolution Protocol (ARP) protocol translates IPv4 addresses to MAC addresses. Typically, an interface responds with its MAC address only when an ARP request for its IP address is received. A proxy ARP implies that the same interface will proxy for other IP addresses (that is, respond to ARP requests for other IP addresses). Managing a proxy ARP automatically enables the selection of an appropriate interface for any address (as part of a NAT rule) that is not an actual interface address. Proxy ARP management applies to translated addresses in a source NAT rule or to a destination address in a destination NAT rule. Note: When creating a source NAT rule with pool translation, the address pool assigned must be in the same subnet as the outgoing interface selected. Note: When creating a destination NAT rule, the external WAN interface can be a proxy for another IP address in the same subnet as the original IP address of the interface. |
Sites Applied On | Select the sites on which you want to apply the policy in the Available column and move them to the Selected column by clicking the greater-than icon (>). Note: The Available column lists only those sites that do not have a NAT policy associated with them. |
Sequence No. | Click Select Policy Sequence. The Select Policy Sequence page appears, displaying all NAT policies. Select the policy you want to reorder and select Move Policy Up or Move Policy Down to reorder your NAT policy among the existing policies. |
