Configuring an Interface with NAT 739Programming Operations GuideConfiguring an Interface with NATThis section describes how to configure an interface with NAT. It also includes information about:• “Adding Default rules” on page 739• “Adding a Rule to an interface” on page 740• “Modifying a Rule to an Interface” on page 741• “Deleting a Rule to an Interface” on page 742• “Configuring the Rule order” on page 742• “Examples of common NAT configurations” on page 743Adding Default rules1 On the navigation tree, click the Services key and click the NAT key.2 Click the interface you want to configure. For example: LAN1.The Rule Order screen appears.3 Click the Default Rules box and click Disabled, Enabled - include IP phones, orEnabled - do not include IP phones.If you choose Enabled - include IP phones, the NAT default rules apply to all data trafficincluding IP telephony traffic.There are three default rules set. The first rule is for outbound TCP/UDP traffic. The secondrule is for outbound IP traffic. The third rule is for inbound TCP/UDP traffic on port 7000. TheIP address for the Public address is the IP address of the interface you configure. The systemautomatically fills in the rule order. If you choose to add additional rules, the default rules stillremain.If you choose Enabled - do not include IP phones, the NAT default rules do not apply to IPtelephony traffic, but does apply to all other traffic.If you choose this option, there are two default rules set. One is for outbound TCP/UDP traffic.The other is for outbound IP traffic. The IP address for the Public address is the IP address ofthe interface you configure. The system automatically fills in the rule order. If you choose toadd additional rules, the default rules still remain.If you choose Disabled, the Default Rules are removed.The default is Disabled.Note: Rules can be configured in several ways, using default rules, setting upindividual rules or a combination of the two.Note: The default rules are only for traffic initiated in the outbound direction. Youmust add rules for inbound traffic or packets will pass in without translation.
