Configuring A Service For Incoming Static Nat; Adding External Ip Addresses; Setting Static Nat For A Service - Watchguard Firebox X1000 User Manual

Chapter 7: Configuring Network Address Translation

Configuring a Service for Incoming Static NAT

For more information on static NAT, see the following
FAQs:
https://support.watchguard.com/advancedfaqs/
nat_whenstatic.asp
https://support.watchguard.com/advancedfaqs/nat_outin.asp

Adding external IP addresses

Static NAT converts a Firebox public IP and port into spe-
cific destinations on the trusted or optional networks. If
you want to use an address other than that of the external
interface itself, you must designate a new public IP address
using the Add External IP dialog box. From Policy Man-
ager:
1 Select Network = > Configuration. Click the Aliases
button.
The Add External IP dialog box appears.
2
At the bottom of the dialog box, enter the public IP
address. Click Add.
3
Repeat until all external public IP addresses are added.
Click OK.

Setting static NAT for a service

Static NAT, like service-based NAT, is configured on a ser-
vice-by-service basis. Because of the way static NAT func-
tions, it is available only for services based upon TCP or
UDP, which use a specific port. A service containing any
other protocol cannot use incoming static NAT, and the
NAT button in the service's Properties dialog box is dis-
abled. Static NAT also cannot be used with the Any ser-
108 WatchGuard Firebox System