Add a dynamic NAT configuration


Configure outbound dynamic network address translation (NAT) on the Sun Secure Application Switch.

Dynamic NAT translates multiple private addresses to a single public address. This means that one global public address can be used for a range of real IP addresses in the backend network.

Since dynamic NAT supports many backend server real IP addresses that map to a single global address, dynamic NAT must also translate the ephemeral port in each outbound request and maintain state information for each TCP connection.

Access mode

config

Syntax

vSwitch-name loadBalance outboundNat dynamic

Arguments

Field Name Description
name text A text string assigned to the dynamic NAT configuration.
natIPAddress ipAddress Specifies the virtual addresses mapped to (and representing) configured hosts.
adminState enumeration Optional: The administrative state of the address translation capability.

The default setting is "enabled".

Valid values: enabled, disabled
vRouter text Optional: The name of the virtual router, typically the Internet vRouter, to which the host's vRouter will forward an HTTP response. Enter the name in the format vSwitch:vRouter.

The default setting is "system:shared".
natPortRange text Optional: The range of ports to use in conjunction with the NAT IP Address for outbound packets.

The default setting is "1024-65535".