Download Series 2000 3G Modem / Router User Manual

Cybertec Pty Limited
c 2010
Copyright Document: 0013-001-000198
Series 2000 User Manual
Version: 1.40
15 October, 2010
Outgoing interface If selected, packets will be matched based on the network interface they will be transmitted on. Note
that this can only be applied to a Source NAT.
Protocol If selected, packets will be matched based on their protocol type. Note that if you wish to match on source or
destination ports, the protocol must be set to TCP or UDP.
Source address If selected, either a single address (for example, 172.16.1.132) or a subnet range (for example, 172.16.0.0/24)
can be entered. Only packets matching this source address will have the filter applied to them.
Source port or range If selected, packets will be matched based on their TCP or UDP source port. Either an individual
port (for example, 443) or a range of ports (80-143) can be entered.
Destination address Similar to the Source address, but instead matching on the destination address.
Destination port or range Similar to the Source port or range, but instead matching on the destination port.
Target address This is the address that the NAT rule will apply to packets. When set to Custom, any IP address can be
entered in the text box. If an interface is selected from the dropdown box, the current address of that interface will
be applied to packets.
Target port For rules that specify either the TCP or UDP protocol, it is possible to also alter the port number. If no
change of port number is desired, this field can be left blank.
Insert this entry at position Determines where this entry will be inserted in the list of custom NAT rules.
14.6.3
Adding a new custom NAT
From the main custom NAT page click the Add new custom NAT button. This will select the Add new custom NAT
page. An example of adding a new custom NAT is shown in Figure 177. In this example, a new custom NAT is created
which will source NAT packets outgoing on the SSL VPN interface to the IP address of the SSL VPN.
Figure 177: Adding a custom NAT
It can be seen in the example that in the centre column only Outgoing interface is checked. This indicates these are the
matching criteria that will be applied to packets. In this case, all packets outgoing on the SSL VPN will be source NAT’d.
Click Update to save the new custom NAT. The custom NAT table will be updated to include the new custom NAT as
shown in Figure 178.
Page 117 of 186