iPECS SBG-1000 User Manual

iPECS SBG-1000 User Manual (DATA Features)
Matching Use this section to define characteristics of the packets matching the rule.
• Source Address The source address of packets sent or received by iPECS SBG-1000. Use
this drop-down menu to specify a LAN computer or a group of LAN computers on which you
would like to apply the rule. Select an address or a name from the list to apply the rule on the
corresponding host, or ‘Any’ to apply the rule on all iPECS SBG-1000’s LAN hosts. If you
would like to add a new address, select the ‘User Defined’ option in the drop-down menu.
This will commence a sequence that will add a new Network Object, representing the new
host. Refer to Section 6.9.2 in order to learn how to do so.
• Destination Address The destination address of packets sent or received by iPECS
SBG-1000. This address can be configured in the same manner as the source address. For
example, use this drop-down menu to specify an IP address of a remote application server
(such as a security server), which requires that the incoming packets have a specific IP
address (e.g., one of those defined in your NAT IP address pool).
• Protocol You may also specify a traffic protocol. Selecting the ‘Show All Services’ option
from the drop-down menu expands the list of available protocols. Select a protocol or add a
new one using the ‘User Defined’ option. This will commence a sequence that will add a new
Service, representing the protocol. Refer to Section 6.9.2 in order to learn how to do so.
Operation Use this section to define the operation that will be applied on the IP addresses
matching the criteria defined above. The operations available are NAT or NAPT. Selecting each
from the drop-down menu refreshes the screen accordingly.
• NAT Addresses
Figure 5.32 Add NAT Rule
This drop-down menu displays all of your available NAT addresses/ranges, from which you can
select an entry. If you would like to add a single address or a sub-range from the given
pool/range, select the ‘User Defined’ option in the drop-down menu. This will commence a
sequence that will add a new Network Object, representing the new host. Refer to Section 6.9.2
in order to learn how to do so.
• NAPT Address
52