Table of Contents
Advertisement
Chapter 7.
The features described in this chapter include: NAT and DMZ, route configuration, network
vanguard defense, port mirroring, port VLAN and SYSLOG configuration.
7.1
NAT and DMZ configuration
This section describes the features and configuration methods of the Advanced
Configuration->NAT and DMZ configuration page.
7.1.1
Description of NAT functions
NAT (network address translation) is a technology to map an IP address field (such as Intranet) to
another IP address field (such as the Internet). NAT was designed to solve the problem of
increasing shortage of IP addresses, NAT allows a private network to use the IP address in any
range internally, and for the public Internet, it is reflected as limited range of public network IP
addresses. Since the internal network can be effectively isolated from the outside world, so NAT
can also provide some assurance for network security.
LEVELONE routing products provide flexible NAT function. The following will detail its
characteristics.
1.
NAT address space
In order to correctly conduct the NAT operation, any NAT device must maintain two address
spaces: one is the private IP addresses used internally by Intranet hosts, which is represented by
"Internal IP address" in the device. Another is the public network IP address for external use,
which is represented by "External IP address" in the device.
2.
NAT Static mapping and virtual server (DMZ host)
After the NAT feature is enabled, the device blocks the access requests that originate outside.
However, in certain application environments, a computer in the external network hopes to access
to the Intranet server through the device, at this point, the static NAT mapping or virtual server
http://www.level1.com
Advanced Configuration
Chapter 7 Advanced Configuration
Page 41
Advertisement
Table of Contents
