Masquerading Page - McAfee SG310 Administration Manual

Firewall menu options
NAT
From the Firewall menu, click NAT > 1 to 1 NAT tab. The 1 to 1 NAT page is displayed. Any rules that
1
have already been defined are displayed.
Click the edit icon for the rule you want to edit. An edit page appears.
2
Select the Enable checkbox.
3
Click Finish.
4
Deleting a one-to-one NAT rule
From the Firewall menu, click NAT > 1 to 1 NAT tab. Any rules that have already been defined are
1
displayed.
Click the delete icon for the rule you want to delete. You are prompted to confirm the delete. Click OK.
2
Example: Creating a one-to-one NAT rule
This example creates a rule to map the private address of the mail server on the LAN to a public IP address
on the Internet Interface, Port B.
This example assumes there is a predefined address named "LAN-Mail-Server", and an address alias
1.1.1.1 defined for port B.
From the Firewall menu, click NAT > 1 to 1 NAT tab. The 1 to 1 NAT page is displayed. Any rules that
1
have already been defined are displayed.
Click New, or the add above or below icon, depending on your current configuration and where you want
2
to place the rule. The Modify 1 to 1 NAT page appears
Figure 191 One-to-one NAT example
In the Descriptive Name field, enter LAN-Mail-Server-NAT.
3
Allow the Enable checkbox to remain selected.
4
From the Private Address list, select LAN-Mail-Server.
5
From the Public Address list, select Alias (ip address) Port B.
6
From the Public Interface list, select Port B.
7
Click Finish.
8

Masquerading page

Masquerading is a form of source NAT. It translates many addresses, such as private LAN IP addresses, into
a single address, such as the external IP address. Masquerading has the following advantages:
• All machines on the local network can access the Internet using a single ISP account.
• Only one public IP address is used and is shared by all machines on the local network. Each machine has
its own private IP address.
186 McAfee UTM Firewall 4.0.4 Administration Guide
(Figure ).