Skip to main content
scheehan_FTNT
Staff & Editor
Staff & Editor
June 17, 2015

Technical Tip: How to perform SNAT for a specific subnet

  • June 17, 2015
  • 0 replies
  • 1089 views

Description

 

This article explains how to perform SNAT for a specific subnet: Configuring source NAT 
 
Scope
 
FortiADC.


Solution

 

Network Diagram:

 

fad-e.jpg

 

Configure a NAT rule on the Internal VLAN:

 

scheehan_FD36673_NAT_settings.jpg

 

Configure Permit rules for both Internal and External VLANs:

 

scheehan_FD36673_permit_rules.jpg

 

Verify Permit and NAT rules information with 'show sbr'.

IP Filter Rules:

IPv4 Rules:

 

7: pass on interface wm0 hits: 483 bytes: 22375
                From         To
                 any           ->           10.128.0.0/24
8: pass on interface wm0 hits: 2752 bytes: 246636
                From         To
                 any         ->         192.168.146.0/23
13: pass on interface wm2 hits: 484 bytes: 11322
                From         To
       10.128.0.0/24                ->                any

IP NAT Rules:
List of active MAP/Redirect filters:
map wm0 10.128.0.0/24 -> 192.168.146.179/32 proxy port ftp ftp/tcp
map wm0 10.128.0.0/24 -> 192.168.146.179/32 portmap tcp/udp auto
map wm0 10.128.0.0/24 -> 192.168.146.179/32