Also, be sure that the ranges and groups used in the Destination and Translated Destination fields are exactly the same size.
Type the following if the networks that attach to the Screen on the inside have internal addresses, including any network on which there are addresses to which you want to allow external access:
# arp -s IP_Address ether_address pub
You must either add this entry each time that you reboot the Screen or you can write your own script to automate this function. If you are remotely administering the Screen, you either must go to the Screen to add this entry or have a rule in your policy that will allow you to rlogin to the Screen.
Type the following command to create a static NAT entry that maps an internal address to an external address.
For local administration:
edit> add nat STATIC src dest translated_src translated_dest
In most cases when defining a static mapping, the internal address and external address are each a single address, but can be a range or a list.
Repeat for every mapping that you want.
You may also use a range of addresses or a group of addresses.
To have the changes take effect, you must activate the policy whose rules you edited
Type the following command to delete a NAT entry that maps internal address to an external address, regardless of whether mapping is static or dynamic:
edit> del nat 1
To have the changes take effect, you must activate the policy whose rules you edited.