Ubigate iBG2016 Configuration Guide/Ed.00© SAMSUNG Electronics Co., Ltd. 243Static NAT (one to one)Figure 3.6 Static NATIn static(one-to-one) NAT type, for each IP address in the corporate network,one NAT IP address will be used. For example, for the three IP addresses from10.1.1.1 to 10.1.1.3, there is a set of three NAT IP address from50.1.1.1 to 50.1.1.3. In case of one-to-one NAT, only IP address translationtakes place, that is, if a packet travels from 10.1.1.1 to yahoo.com, theFirewall only substitutes the source address in the IP header with the NAT IPaddress. The source port will be the same as the original.The static NAT configuration shown in Figure 23.6 includes:y Private network address: 10.1.1.1-10.1.1.3y Public(NAT) IP address range: 50.1.1.1-50.1.1.3To create NAT pool with type static, specify the IP address and the endingNAT IP address. Add a policy with source IP address range and attach NATpool to the policy.Router/configure# firewall corpRouter/configure/firewall corp# objectRouter/configure/firewall corp/object# nat-pool natStatstatic 50.1.1.1 50.1.1.3Router/configure/firewall corp/object# exitRouter/configure/firewall corp# policy 7 out address10.1.1.1 10.1.1.3 any anyRouter/configure/firewall corp/policy 7 out# apply-objectnat-pool natStatRouter/configure/firewall corp/policy 7 out# exit 2Router/configure#10.1.1.110.1.1.350.1.1.1.50.1.1.3InternetOPAL10.1.1.2
