Source Nat - Siemens SIMATIC NET SCALANCE S615 Configuration Manual

4.7.3.3

Source NAT

On this WBM page, you configure the rules for source NAT.
Description
● "Source Interface" / "Destination Interface" drop-down list
Specify the direction of the connection establishment. Only connections established in
this specified direction are taken into account.
The virtual interfaces of VPN connections can also be selected:
– VLANx: VLAN with configured subnet
– SINEMA RC: Connection to SINEMA RC Server
– IPSecVPN: Either all IPsecVPN connections (all) or a specific IPsecVPN connection
Note
When you configure a NAT address translation to or from the direction of the VPN tunnel,
only the IP addresses involved in the NAT address translation rules can be reached via
the VPN tunnel.
● "Source IP Address(es)" input box
Specify the source IP addresses for which this source NAT rule is valid. Only the packets
that correspond to the addresses entered are taken into account.
The following entries are possible:
– IP address: Applies precisely to the specified IP address.
– 0.0.0.0/0: Applies to all IP addresses
– IP address range: Applies to the specified IP address range: Start IP address "-" End
– IP address band: Applies to the IP addresses covered in the IP address band: IP
Use Interface IP from Destination Interface
When enabled, the IP address of the selected destination interface is used with
"Translated Source IP Address".
SCALANCE S615 Web Based Management
Configuration Manual, 05/2015, C79000-G8976-C388-02
IP address, e.g. 192.168.100.10 - 192.168.100.20
address/number of bits of the network part (CIDR notation)
Configuring with Web Based Management
4.7 "Layer 3" menu
141