Configuring Static Nat - Nokia IP71 User Manual

3
Configuring IP71
4. Enter the following information:
Host ID represents the IP71. The Host ID helps Nokia Horizon Manager
n
identify the IP71 even if the IP address changes.
Expiration date of the Check Point NG license.
n
SKU/ Features identifies what the License allows the IP71 to do. The
n
value for this field resembles the following but is not identical:
CPVP-VSO-50-3DES-MODULE-V41 CK-563A84B1853
The unique key for this license. It resembles the following example but is
n
not identical. All keys are unique.
Example: gs8e0KsjS-JdLeefJ5o-HdJ4JdSj4-SlE4fSIEk
You are asked one of the following questions at the end of the Check Point
configuration. The question will either be Do you wish to enable Check
Point? or Do you wish to restart Check Point? Press the Y key and then press
Enter to accept.
When the license processes, the Adding Check Point License message
appears. It takes a minute to add a Check Point License.
Similarly, you can execute all the actions explained in the GUI, using
respective CLI commands.

Configuring Static NAT

Network Address Translation (NAT) is as much a part of the security policy as
the security policy rules that you create. You should consider NAT when you
plan a security policy. In this example, private address space is being used on
the internal network, which means NAT is required if computers on the
internal network need to talk to the Internet.
The following example shows how to set up NAT on the IP71.
The security policy for this site is as follows:
Allow all client machines to access web and FTP sites.
n
Allow inbound HTTP traffic to the Web server.
n
Except for the above, deny all other traffic.
n
78 Nokia IP71 User Guide