WatchGuard Firebox System 7.0 User Guide

Using Simple Dynamic NAT3 Use the To drop-down list to select the destination ofoutgoing packets.4 To add either a host or network IP address, click the ...button. Use the drop-down list to select the addresstype. Enter the IP address or range. Network addressesmust be entered in slash notation.When typing IP addresses, type the digits and periods insequence. Do not use the TAB or arrow key to jump past theperiods. For information on entering IP addresses, see “EnteringIP addresses” on page 43.5 Click OK.The new entry appears in the Dynamic NAT Entries list.Reordering simple dynamic NAT entriesTo reorder dynamic NAT entries, select the entry and clickeither Up or Down. There is no method to modify adynamic NAT entry. Instead, use the Remove button toremove existing entries and the Add button to add newentries.Specifying simple dynamic NAT exceptionsYou can set up ranges of addresses in dynamic NAT so thateach address in that range is a part of the NAT policy. Byusing the dynamic NAT exceptions option you can excludecertain addresses from that policy.From Policy Manager:1 Select Setup => NAT.The NAT Setup dialog box appears.2 Click Advanced.The Advanced NAT Settings dialog box appears.3 Click the Dynamic NAT Exceptions tab.4 Click Add.The Add Exception dialog box appears.5 In the From and To boxes, select Trusted, Optional,dvcp_nets, or dvcp_local_nets.The latter two choices are aliases for VPN Manager and appearif your Firebox is configured as a DVCP client. dvcp_nets refersto networks behind the DVCP client and dvcp_local_nets refers toUser Guide 105