CLI Guide - WatchGuard Technologies

CHAPTER 3: Configuration Mode Commands
NOTE
Note that dynamic NAT is already present in the
WatchGuard database by default, and is ready for use in
security policies. You can specify “dynamic_nat” as the NAT
action when you create the appropriate policies
Examples
WG(config)#nat load_balancing –vip
wround –server \
{10.10.0.100 80 1} {10.10.0.101 80 2} \
{10.10.0.102 80 3}
WG(config)#nat natS -stat -ext pub1 -int
\
web_server1
Record dynamic security policy IP NAT action
WG#config
WG(config)#nat [-dynamic_nat
]
Effect
Records a new dynamic IP NAT action for use in
security policies. You can create one of two
possible DNAT options, choosing from the default
IP address for interface 1 or a user-designated IP
address
Arguments
If this is to be a user-designated IP address DNAT
action, enter the IP address of your choice as the
command argument. If you are using the default
interface 1 IP address, enter that in the argument.
no command
WG#config
WG(config)#no
high_availability disable high
availability
56 WatchGuard Vclass 5.1