SonicWALL TZ 210 Series Getting Started Manual page 43

TZ_210_GSG.book Page 32 Thursday, November 13, 2008 7:41 PM
This section describes how to configure a One-to-One NAT
policy. One-to-One is the most common NAT policy used to
route traffic to an internal server, such as a Web server. Most of
the time, this means that incoming requests from external IP
addresses are translated from the IP address of the SonicWALL
security appliance WAN port to the IP address of the internal
Web server. The following example configuration illustrates the
use of the fields in the Add NAT Policy procedure. To add a
One-to-One NAT policy that allows all Internet traffic to be
routed through a public IP address, two policies are needed:
one policy for the outbound traffic, and one policy for the
inbound traffic.
Page 32 Network Address Translation
To add the components of a One-to-One NAT policy, perform
the following steps:
1. Navigate to the Network > NAT Policies page. Click Add.
The Add NAT Policy dialog box displays.
2. For Original Source, select Any.
3. For Translated Source, select Original.
4. For Original Destination, select X0 IP.
5. For Translated Destination, select Create new address
object and create a new address object using WAN for
Zone Assignment and Host for Type.
6. For Original Service, select HTTP.
7. For Translated Service, select Original.
8. For Inbound Interface, select X0.
9. For Outbound Interface, select Any.
10. For Comment, enter a short description.
11. Select the Enable NAT Policy checkbox.
12. Select the Create a reflexive policy checkbox if you want
a matching NAT policy to be automatically created in the
opposite direction. This will create the outbound as well as
the inbound policies.
13. Click Add.
For more information on creating NAT policies, refer to the
SonicOS Enhanced Administrator's Guide.