SunScreen 3.2 Configuration Examples

Network Example

Figure 3-1 (and the instructions that follow) demonstrate how you can configure NAT on a Screen to make hosts on an internal network routable on the Internet.

Assume that host sf-host1 is a company web server that requires access from the Internet. Use STATIC NAT to translate the private unregistered address to a public, registered address (from 10.0.1.1 to 192.168.2.101 for this example). Use dynamic NAT to translate all other addresses in the San Francisco network to a single, public registered address (192.168.2.102 in this example).

Figure 3-1 San Francisco Segment of the Sample Company Network

Graphic