Sidewinder G2 6.1.1 Administration Guide - Glossary of Technical ...

Figure 4-11. "Source
port" NAT IP Filter rule
implementation
A
172.27.18.9
internal
network
Sidewinder
G2
Possible connections from workstation
A to application B using “source port
NAT IP Filter rule
Internal IP
172.27.18.9:50
172.27.18.9:50
172.27.18.9:50
172.27.18.9:50
IP aliases
11.80.1.4
11.80.1.5
11.80.1.6
11.80.1.7
11.80.1.1
pool of available IP
addresses
IP Filter rule basics
192.1.1.1 listening
on port 50
By specifying one or more IP aliases you can have multiple
connections (each connection uses the same port number but a
different IP address).
Requirements Please note the following requirements when using NAT to specify the
source port of an IP Filter connection.
app. B
Source IP Source Port Dest IP Dest Port
11.80.1.4 50 192.1.1.1 50
11.80.1.5 50 192.1.1.1 50
11.80.1.6 50 192.1.1.1 50
11.80.1.7 50 192.1.1.1 50
This configuration only applies to uni-directional (source ->
destination) TCP/UDP IP Filter rules with stateful inspection
enabled.
Use Source Port when specifying the source port in an IP Filter
connection. See “Creating IP Filter rules” on page 7-12 for more
information.
Understanding Policy Configuration 4-35