Applies To:
Show VersionsBIG-IQ Centralized Management
- 5.0.0
About NAT policies and translations
You can use network translation address (NAT) policies to translate network addresses. These NAT policies contain rules that contain NAT source translations and NAT destination translations.
You associate a NAT policy with a global context, route domain context, or virtual server firewall context by adding it to the NAT Policy property of the firewall context.
You can discover a NAT policy on a BIG-IP® device version 12.1 or later, or create one on a BIG-IQ® system using the Network Security Policy Editor and then deploy it to a BIG-IP device version 12.1 or later.
Creating a NAT policy
NAT rule properties
The following table lists and describes the properties required when configuring NAT policy rules. These rules are similar to rules used in firewall policies, but have a different set of properties.
Property | Description |
---|---|
Name | Unique, user-provided name for the rule. |
Address (Source) | Source address or addresses. Select the type of source address from the list:
|
Port (Source) | Source port or ports. Select the type of port from the list:
|
VLAN (Source) | Name of the VLAN physically present on the device (Internal, External, or Any). If you specify a VLAN in a rule without also specifying the VLAN's partition, the deployment task will fail when you attempt to deploy that rule to a firewall. Use the format partition/VLAN or /partition/VLAN. For example: Common/external or /Common/external. When you are finished, click Save or Save & Close. |
Address (Destination) | Select the type of destination address from the list:
|
Port (Destination) | Destination port or ports. Select the type of port from the list:
|
Description | Optional description for the current rule. To add a description, click in the column, type text, and click Save or Add. |
Protocol | IP protocol to compare against the packet. Select the appropriate protocol from
the list and click Save or Save &
Close. The default type is Any and the default
code is Any.
Note: The type and code combinations
are too numerous to document here. For details, consult the F5 Networks DevCentral
site, http://devcentral.f5.com, or the documentation for the
specific BIG-IP® platform.
|
State | Select whether the rule is enabled or disabled. The field is updated. Click Save or Save & Close to save your changes. |
Translated Source | Type the name of a NAT Source Translation in the field. Alternatively, from the Shared Resources list at the bottom, you can select NAT Source Translations to list those available and then drag and drop it into the Translated Source field. |
Translated Destination | Enter the name of a NAT Destination Translations in the field. Alternatively, from the Shared Resources list at the bottom, you can select NAT Destination Translations to list those available and then drag and drop it into the Translated Destination field. |
Log Profile | Type the name of a logging profile in the field. This logging profile must already be defined using Logging Profiles in Shared Security. |
Cloning a NAT policy
Deleting a NAT policy
- Log in to the BIG-IQ ® system with your user name and password.
- At the top left of the screen, select Network Security from the BIG-IQ menu.
- Click Policy Editor, and then from the list on the left, click NAT Policies.
- Select the one or more NAT policies to be removed by selecting the check box for the appropriate NAT policy.
- Click Delete.
- Confirm that you want to remove the NAT policy by clicking Delete in the confirmation dialog box.
Creating NAT source translations
Cloning NAT source translations
Deleting NAT source translations
- Log in to the BIG-IQ ® system with your user name and password.
- At the top left of the screen, select Network Security from the BIG-IQ menu.
- Click Policy Editor, and then from the list on the left, click NAT Source Translations.
- Select check box for one or more NAT source translations to remove.
- Click Delete.
- Confirm that you want to remove the NAT source translations by clicking Delete in the confirmation dialog box.
Creating NAT destination translations
Cloning NAT destination translations
Deleting NAT destination translations
- Log in to the BIG-IQ ® system with your user name and password.
- At the top left of the screen, select Network Security from the BIG-IQ menu.
- Click Policy Editor, and then from the list on the left, click NAT Destination Translations.
- Select one or more NAT destination translations to remove by selecting the check box for the appropriate NAT destination translations.
- Click Delete.
- Confirm that you want to remove the NAT destination translations by clicking Delete in the confirmation dialog box.