The network mapping rules allow you to replace the address of the source or destination network. This may be useful when you have multiple networks with the same addressing, e.g. 192.168.1.0/24, and you want to merge them into a single network with common routes. Such merging can be implemented only with replacement of addresses.
Important! Rules are applied from top to bottom in the same order as they are displayed in the console. The system always applies only the first rule for which all criteria are met. This means that the most specific rules must be in the upper part of the list, while the broader rules must be in the bottom. If you want to change the order of rules, use the Up/Down buttons.
Important! The rule will be applied only when all its specific conditions are met. The Negate checkbox makes the condition opposite to the initial condition, i.e. corresponds to logical negation (NOT).
To create a new Network mapping rule, click Add in the Network policies--> NAT and routing section and specify the following parameters.
|
Name |
Description |
|---|---|
|
Enabled |
Enables or disables a rule |
|
Name |
Rule name |
|
Comment |
Description of a rule |
|
Type |
Select Network mapping |
|
Enable logging |
Logs information about traffic when a rule is triggered. The following modes can be used:
|
|
Source |
A source zone and/or a list of source IP addresses for the traffic. |
|
Destination |
A destination zone and/or a list of destination IP addresses for the traffic. |
|
Services |
Service type, e.g. HTTP, HTTPS, etc. |
|
Network mapping |
Set the network replacement parameters. Direction:
New network/mask is the network address that will be used for replacement. |