nat(4)

NAME
nat - network address translation (NAT) object for SunScreen configuration

DESCRIPTION
A nat rule describes how and when addresses should be translated. It is manipulated via the configuration editor or SunScreen administration GUI.

There are two types of nat rules: STATIC and DYNAMIC. All nat rules consist of four address references. In any given nat rule, only the source or the destination addresses may differ, meaning that only the source or the destination address can be translated. You cannot translate both the source and the destination address of a packet.

STATIC nat rules are one-to-one mappings between addresses of the same size.

DYNAMIC nat rules are many-to-one mappings between a large set of IP addresses to a smaller set. In this case, the network traffic must initiate from the largest set of addresses.

All nat rules may have an optional COMMENT field associated with them which is a 256-character or less user-provided comment.

All nat rules may be optionally associated with a specific SCREEN object. If a nat rule is so associated, it will only be instantiated on the Screen with which it is associated. This is necessary if multiple Screens are being managed in a group since the NAT translations are very Screen specific.

A nat entry is uniquely identified by its position in the list of nat entries. This numeric position is its identity regradless of any association with a SCREEN object. This identity may change as other nat entries are added to the list.

SEE ALSO
ssadm-edit(1M), address(4), screen(4)