Configuration Guide# How to Configure Basic SNAT Policy

Product: NGAF

Version: 8.0.47

1. Introduction

1.1 Scenario

In a typical small Enterprise Network, internal users or LAN users must have access outside or what we call the “Internet”. An example of this is a user that is using Google Services like Gmail or a user that needs to have access to social media platforms like Facebook or Twitter etc.

In this article, I will show you how to configure an SNAT (Source Network Address Translation) policy on the Sangfor NGAF. SNAT will translate the internal IP to the public IP. This is to allow internal users to access the internet.

1.2 Prerequisites

1) Two Zones must be created, theLAN and WAN Zone.

2) The interface eth2 is in the WAN Zone

3) The interface eth3 is in the LAN Zone

4) The interface eth2 must have the “WAN attributes” check just like the image below:

<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

2. Configuration Guide

2.1 NGAF Configuration

Step 1.

Go to Policies > NAT > IPv4 NAT and click Add, as shown below:

Step 2. A new window will pop up when you click the Add Button. Then put the following details:

1) Descrtiption: Aggregate Link to Core Switch

2) Type: Source NAT

3) Name: Basic_SNAT

4) Description: NAT Policy for the internal users to access the internet

5) Original Data Packet

-Src Zone: LAN

-Src Address: Private Network Segment

-Dst Zone/interface: WAN

-Dst Address: All

6) Translated Data Packet

Translate Src IP To: Outbound Interface

Then click Save.

Note: Under the “Src Address” I choose “Private Network Segment since LAN users are using Private IP Addresses but it can be specified by creating an Object.

Step 3. Verify the newly created IPv4 NAT Policy:

Step 4. Verify if the users can access the internet

<<<<<<<<<<<<<<<<<<<<<<<<<< <<<<<<<<<<<<<<<<<<<<<<<<<< <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<

3. Precaution

1. For this SNAT Policy to work, there should be at least Access Control configured with the action “Allow” just like the image below:

--------------------------------------------- This article is contributed by    ----------------------------

Wanna get to know him? Click here.

We warmly welcome engineers to share your creations like configuration guides or troubleshooting cases with us. Each article will be rewarded with at least 4000 coins.

For more details please click here: https://community.sangfor.com/forum.php?mod=viewthread&tid=7706