ngaf management

Good day everyone , just asking What Nat configuration I will use for me to access my NGAF management console through internet?


Thanks in advance..

Hi,

If you want to access the NGAF Management Console outside your network, you must configure Destination NAT (DNAT). It is generally called Port Forwarding. The typical usage of DNAT is to map the IP Address of your Local LAN to the Public Network (Internet) so you can access them publicly.

Depends on different scenario, NAT can be divided as four types:

1. Source network address translation - translate internal IP to public IP to allowed internal user to access the internet

2. Destination network address translation - used to allow external user to access internal server

3. Bidirectional network address translation - allow internal user to use public IP or domain name to access internal server

4. NAT64 or NAT46 - internal IPv4 server needs to be release to IPv6 address for access

I recommend to use the Bidirectional NAT because NGAF deploy as internet gateway, internal have a web server and enduser/client had apply a domain name www.test.com (or which domain will be used) and point to 2.2.2.2.

In this setup the enduser wants internal user to access by web server via www.test.com (preffered domain used).

Steps:

1. Click Policies > NAT > then click IPv4 NAT > choose Destination NAT (please see step 1 picture)

2. On the new window appear, name it to whatever you wnat then click the more option in the "SRC Zone" (please see step 1 picture)

3. In the new window apper, only choose the internal zone as the source zone which is the LAN then click OK. (please see step 2 picture)

4. After fill the details such as public IP address, protocol and port in the original data packet and translated data packet columns. (please see step 3 picture) Click "Advanced" then Enable the Bidirectional NAT then choose advanced option.

5. From Select Zone choose the targeted destination IP thenc choose OK.

6. Then select "Egress interface" in the Translate SRC To. (please see step 4 picture) then click OK to all window.

7. Then you can test now the configuration

If you want to access the NGAF Management Console outside your network, you must configure Destination NAT (DNAT). It is generally called Port Forwarding. The typical usage of DNAT is to map the IP Address of your Local LAN to the Public Network (Internet) so you can access them publicly.

you must configure Destination NAT