Using Static Nat; Adding And Editing Static Nat Mappings - Nokia IP40 User Manual

d. Click OK.

Using Static NAT

Static NAT (or one-to-one NAT) allows the mapping of Internet IP addresses or address ranges
to hosts inside the internal network.
This mapping is useful if you want a computer in your private network to have its own Internet
IP address. For example, if you have both an email server and a Web server in your network, you
can map each server to a separate Internet IP address.
Static NAT rules do not imply any security rules. To allow incoming traffic to a host for which
you defined static NAT, you must create an Allow rule. When you specify firewall rules for such
hosts, use the host internal IP address, and not the Internet IP address to which the internal IP
address is mapped.
Note
You can use static NAT and hide NAT together.
Note
IP40 supports Proxy Address Resolution Protocol (ARP). When an external source attempts
to communicate with a computer that has static NAT enabled, the IP40 automatically replies
to ARP queries with its own MAC address, thereby enabling communication. As a result, the
static NAT Internet IP addresses appear to external sources to be real computers connected
to the WAN interface.

Adding and Editing Static NAT Mappings

The following procedure explains how to add or edit static NAT mappings.
To add or edit a static NAT map
1. Click Network in the main menu, and click the Static NAT tab.
The Static NAT page appears.
Nokia IP40 Security Platform User's Guide v1.1
A success message appears.
Using Static NAT
87