Lucent Technologies SLC ConnectReach User & Service Manual page 206

®
Configuring the SLC ConnectReach
Using the Configuration Commands
Configuring NAT and PAT (Continued)
Introduction
(continued)
4-120 Issue 4 June 2002
™
System
PAT
Also, for any Dynamic group, Port Address Translation (PAT) may be configured.
PAT allows users on the public (WAN) side of a network to access specific
applications, or specific services, such as those provided by a Web server, an
email server (pop3), or an FTP server on the private (LAN) side of the network.
PAT allows this access without compromising the NAT firewall and network
address translation features. This feature works only for NAT Dynamic
translations, and it is therefore configured under the NAT Dynamic Group menu.
The example in the following figure shows a user on the WAN side of the network
with access to an email and Web server on the LAN side of the network.
The key commands used to create this scenario are:
(config:NAT:Dynamic:Group1)> IN-Start=192.168.0.2
(config:NAT:Dynamic:Group1)> IN-End=192.168.0.254
(config:NAT:Dynamic:Group1)> OUT-Start=60.1.2.1
(config:NAT:Dynamic:Group1)> PAT
(config:NAT:Dynamic:Group1:PAT)> session add http 192.168.0.5
(config:NAT:Dynamic:Group1:PAT)> session add pop3
192.168.0.100
In the above scenario, the WAN User can connect to the Public WAN IP address
and get both Web Server access and email from the pop3 server provided from
within the LAN.
363-208-050
(Continued on next page)