Add a NAT Policy Rule
Table of Contents
Expand all | Collapse all
-
-
- Add a Branch
- Add a Data Center
- Add a Branch Gateway
- Configure Circuits
- Configure Internet Circuit Underlay Link Aggregation
- Configure Private WAN Underlay Link Quality Aggregation
- Configure Circuit Categories
- Configure Device Initiated Connections for Circuits
- Add Public IP LAN Address to Enterprise Prefixes
- Manage Data Center Clusters
- Configure a Site Prefix
- Configure a DHCP Server
- Configure NTP for Prisma SD-WAN
- Configure the ION Device at a Branch Site
- Configure the ION Device at a Data Center
- Switch a Site to Control Mode
- Allow IP Addresses in Firewall Configuration
-
- Configure a Controller Port
- Configure Internet Ports
- Configure WAN/LAN Ports
- Configure a Loopback Interface
- Configure a PoE Port
- Configure and Monitor LLDP Activity and Status
- Configure a PPPoE Interface
- Configure a Layer 3 LAN Interface
- Configure Application Reachability Probes
- Configure a Secondary IP Address
- Configure a Static ARP
- Configure a DHCP Relay
- Configure IP Directed Broadcast
- VPN Keep-Alives
-
- Configure Prisma SD-WAN IPFIX
- Configure IPFIX Profiles and Templates
- Configure and Attach a Collector Context to a Device Interface in IPFIX
- Configure and Attach a Filter Context to a Device Interface in IPFIX
- Configure Global and Local IPFIX Prefixes
- Flow Information Elements
- Options Information Elements
- Configure the DNS Service on the Prisma SD-WAN Interface
- Configure SNMP
-
-
- Prisma SD-WAN Branch Routing
- Prisma SD-WAN Data Center Routing
-
- Configure Multicast
- Create a WAN Multicast Configuration Profile
- Assign WAN Multicast Configuration Profiles to Branch Sites
- Configure a Multicast Source at a Branch Site
- Configure Global Multicast Parameters
- Configure a Multicast Static Rendezvous Point (RP)
- Learn Rendezvous Points (RPs) Dynamically
- View LAN Statistics for Multicast
- View WAN Statistics for Multicast
- View IGMP Membership
- View the Multicast Route Table
- View Multicast Flow Statistics
- View Routing Statistics
- Prisma SD-WAN Incident Policies
-
- Prisma SD-WAN Branch HA Key Concepts
- Configure Branch HA
- Configure HA Groups
- Add ION Devices to HA Groups
- View Device Configuration of HA Groups
- Edit HA Groups and Group Membership
-
- Configure Branch HA with Gen-1 Platforms (2000, 3000, 7000, and 9000)
- Configure Branch HA with Gen-2 Platforms (3200, 5200, and 9200)
- Configure Branch HA with Gen-2 Embedded Switch Platforms (1200-S or 3200-L2)
- Configure Branch HA for Devices with Software Cellular Bypass (1200-S-C-5G)
- Configure Branch HA for Platforms without Bypass Pairs
- Prisma SD-WAN Clarity Reports
- Prisma SD-WAN Incidents and Alerts
Add a NAT Policy Rule
Let us learn how to add a NAT policy rule.
Where Can I Use
This? | What Do I
Need? |
---|---|
|
|
NAT Policy Rules use source and destination
zones, prefixes, ports and protocols. You can directly add policy
rules to a simple NAT stack by clicking a simple NAT stack and then
clicking
Add Rule
. For advanced stacks, you
have to first select a stack, then a policy set within the stack,
and then add policy rules to the policy set.- Add a NAT policy rule to a simple NAT stack.
- Select.ManagePoliciesNATNAT StacksSelect a StackAdd Rule
- Add a source or destination NAT zone.
- Enter aNamefor the NAT policy rule, and enter an optional description and tags.
- Choose Source or Destination Zone based on the direction of traffic with respective to the ION device. Accordingly the policy rule will be classified under Source Zone Rules or Destination Zone Rules.
- Select a previously configured NAT zone from theNAT Zonedrop-down.You can create a new NAT zone by clicking + next to theNAT Zonefield.
- Select anorderbetween 1-4 for the policy rule.An order of 1 indicates the highest priority for the policy rule.
- (Optional)SelectDisable Ruleif you do want the ION device to disregard this rule.
- Configure filters.
- (Optional)On theMatch Criteriascreen, select aProtocolfrom the drop-down list or enter a number between 1 and 255 for a protocol.
- (Optional)ForSourceandDestinationprefixes, choose prefixes from thePrefixesdrop-down list.
- (Optional)Enter a start and end port forPort Ranges. ClickAdd Port Rangeto add additional ports if needed.Note that a maximum of 16 port ranges are allowed, and port ranges can only be added for TCP or UDP protocols.
- Configure NAT actions.On theActionstab, you can configure a maximum of four actions and you can select a NAT Pool per action for every policy rule. Select any of the following NAT actions.
- No NAT—Select if you do not wish to perform a NAT action on the selected filters. When you specifyNo NATfor a policy rule, you cannot specify any of the other NAT actions in that NAT policy rule.
- Source NAT
- Destination NAT
- Static Source NAT
- Static Destination NAT
- ALG Disable
- Add a NAT policy rule to an advanced NAT policy set.
- Select.ManagePoliciesNATNAT StacksAdvancedNAT SetsSelect a policy setAdd Rule