WatchGuard Firebox System 7.0 User Guide

Using 1-to-1 NATA one-to-one mapping exists between each NAT addressand the forwarded (real) IP address: 210.199.6.0 becomes192.168.69.0.From Policy Manager:1 Select Setup => NAT.The NAT Setup dialog box appears.2 Click Advanced.The Advanced NAT Settings dialog box appears.3 Click the 1-to-1 NAT Setup tab.4 Select the checkbox marked Enable 1-1 NAT.5 Click Add.The 1-1 Mapping dialog box appears, as shown in the followingfigure.6 Select the appropriate interface (external, trusted,optional, or IPSec).7 Enter the number of hosts to be translated.8 In the NAT base field, enter the base address for theexposed NAT range.This will generally be the public IP address that will appearoutside the Firebox.9 In the Real base field, enter the base address for thereal IP address range. Click OK.This will generally be the private IP address directly assigned tothe server or client.10 Click the Dynamic NAT Exceptions tab.You must make dynamic NAT exceptions for any internal addressbeing used for 1-to-1 NAT; otherwise, the address will betranslated using dynamic NAT instead of 1-to-1 NAT.11 Click Add.The Add Exception dialog box appears.User Guide 111