Add A Secondary External Ip Address; Remove A Secondary External Ip Address Pair; Enable Secondary Addresses - Watchguard Firebox X15 User Manual

Enable 1-to-1-NAT
Three steps are necessary to enable 1-to-1 NAT:
1. Add an IP address pair. For more information, see
A secondary external IP address is a public IP address on the external interface that also has an IP address on
the trusted or optional (private) network. You must have at least one secondary external IP address to enable
1-to-1 NAT.
2. Add or edit a policy for 1-to-1 NAT. For more information, see
You can use an existing policy or you can add a custom policy that defines the kinds of network traffic that can be
sent or received by the device that uses the secondary external IP address.
3. Enable secondary IP addresses. For more information, see

Add a secondary external IP address

1. To connect to the System Status page, type
of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Firewall > NAT.
The NAT (Network Address Translation) page appears.
3. Type a public IP address from the external network and a private IP address from the trusted or
optional network, then click Add.
The Firebox X Edge maps the private IP address you typed to the secondary external IP address. You can create up
to eight (8) IP address pairs for 1-to-1 NAT.
4. Click Submit to save your changes.

Remove a secondary external IP address pair

1. To connect to the System Status page, type
of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Firewall > NAT.
The NAT (Network Address Translation) page appears.
3. Select the IP address pair you want to delete, then click Remove.
The entry is removed from the Secondary IP Addresses list.
4. Click Submit to save your changes.
If you remove the last IP address pair, 1-to-1 NAT is automatically disabled.

Enable secondary addresses

1. To connect to the System Status page, type
of the Firebox X Edge trusted interface.
The default URL is: https://192.168.111.1
2. From the navigation bar, select Firewall > NAT.
The NAT (Network Address Translation) page appears.
3. Select the Enable secondary IP addresses check box.
4. Click Submit. 1-to-1 NAT is now enabled.
User Guide
Add a secondary external IP
Add or edit a policy for 1-to-1
Enable secondary
in the browser address bar, and the IP address
https://
in the browser address bar, and the IP address
https://
in the browser address bar, and the IP address
https://
Traffic Management
address.
NAT.
addresses.
175