Cisco Systems VPN 3000 Switch User Manual


 
13 Policy Management
13-44
VPN 3000 Concentrator Series User Guide
Action
Click the drop-down menu button and select the translation action for this NAT rule:
No Port Mapping = Translate addresses for packets with protocols that dont use ports and thus dont
involve port mapping (default). For example, this action supports
ping, which uses ICMP.
Map TCP/UDP = Map ports within outbound TCP and UDP packets to dynamic ports (49152 to
65535) on the public IP address, and vice versa. This is the most common type of mapping. It allows
most applications, including Web browsing, to function through NAT.
Map TCP = Map ports within outbound TCP packets to dynamic ports (49152 to 65535) on the public
IP address, and vice versa.
Map UDP = Map ports within outbound UDP packets to dynamic ports (49152 to 65535) on the
public IP address, and vice versa.
FTP Proxy = Provide FTP proxy server functions and map outbound ports to dynamic ports (49152 to
65535) on the public IP address. FTP requires specialized NAT behavior; this action allows
outgoing FTP transactions to function properly.
Add or Apply / Cancel
To add this rule to the list of configured NAT rules, click Add. Or to apply your changes to this NAT rule,
click
Apply. Both actions include your entry in the active configuration. The Manager returns to the
Configuration | Policy Management | Traffic Management | NAT | Rules screen. Any new rule appears at the
bottom of the
NAT Rules list.
Reminder: To save the active configuration and make it the boot configuration, click the
Save Needed icon at the
top of the Manager window.
To discard your settings, click
Cancel. The Manager returns to the Configuration | Policy Management |
Traffic Management | NAT | Rules
screen, and the NAT Rules list is unchanged.
End of Chapter