Cisco ROUTER-SDM-CD User Manual page 603

Chapter 26 Network Address Translation
Direction
Translate from Interface
Note
OL-4015-12
addresses of devices on a VPN, their translated addresses will not match the IPSec
rule used in the IPSec policy, and traffic will be sent unencrypted. You can view
route maps created by Cisco SDM or created using the CLI by clicking the View
Route Maps button in the NAT window.
Choose the traffic direction for this rule.
From outside to inside
Choose this option if you want to translate incoming addresses to addresses that
will be valid on your LAN. You may want to do this when you are merging
networks and must make one set of incoming addresses compatible with an
existing set on the LAN served by the router.
This help topic describes how the remaining fields are used when From outside to
inside is chosen.
This area shows the interfaces from which packets needing address translation
come in to the router. It provides fields for you to specify the IP address of a single
host, or a network address and subnet mask that represent the hosts on a network.
Outside Interfaces
If you choose From outside to inside, this area contains the designated outside
interfaces.
If this area contains no interface names, close the Add Address Translation Rule
window, click Designate NAT interfaces in the NAT window, and designate the
router interfaces as inside or outside. Then return to this window and configure
the NAT rule.
IP Address
Do one of the following:
If you want to create a one-to-one static mapping between the
•
address of a single remote host and a translated address, known as the
local address, enter the IP address for the remote host.
Cisco Router and Security Device Manager 2.5 User's Guide
Network Address Translation Rules
outside global
outside
26-21