Many-To-Many Ip Translation - D-Link NetDefendOS User Manual

These IP rules would result in the following translations:
Original Destination Address
194.1.2.16
194.1.2.17
194.1.2.18
194.1.2.19
194.1.2.20
194.1.2.21
194.1.2.22
194.1.2.23
These translations will mean:
• Attempts to communicate with 194.1.2.16 will result in a connection to 192.168.0.50.
• Attempts to communicate with 194.1.2.22 will result in a connection to 192.168.0.56.
An example of an application for this feature is when there are several protected servers in a
DMZ, and each server is to be accessible using a unique public IPv4 address.
Example 7.5. Many-to-Many IP Translation
In this example, a SAT IP rule will translate from five public IPv4 addresses to five web servers
located in a DMZ. The firewall is connected to the Internet via the wan interface and the public
IPv4 addresses are the range 195.55.66.77 to 195.55.66.81. The web servers have the private IPv4
address range 10.10.10.5 to 10.10.10.9 and are on the network connected to the dmz interface.
The following steps need to be performed:
• Define an address object containing the public IPv4 addresses.
• Define another address object for the base of the web server IP addresses.
• Publish the public IPv4 addresses on the wan interface using the ARP publish mechanism.
• Create a SAT rule that will perform the translation.
• Create an Allow rule that will permit the incoming HTTP connections.
Since the five public IPv4 addresses are being ARP published so these addresses are not routed
on core, the SAT destination interface is wan and not core.
Command-Line Interface
Create an address object for the public IPv4 addresses:
gw-world:/> add Address IP4Address wwwsrv_pub
Now, create another object for the base of the web server IP addresses:
gw-world:/> add Address IP4Address wwwsrv_priv_base Address=10.10.10.5
Publish the public IPv4 addresses on the wan interface using ARP publish. One ARP item is
Translated Destination Address
192.168.0.50
192.168.0.51
192.168.0.52
192.168.0.53
192.168.0.54
192.168.0.55
192.168.0.56
192.168.0.57
Address=195.55.66.77-195.55.66.81
594
Chapter 7: Address Translation