WAN policy-based NAT allows address translation (masking) of connections based on firewall rules. You can now configure which of the WAN-IPv4 addresses assigned by the provider is to be used to mask internal addresses. This is ideal for scenarios where a provider assigns multiple static IPv4 addresses, e.g. for operating mail servers and web servers with different WAN addresses.
For this purpose, the firewall features the new packet option Policy-based NAT under . This action can be used together with the option Transmit and allows masking or NAT behind a specified IPv4 address.
Important: The parameter must be entered as a fixed IP address. Dynamic IP addresses are not supported.
Important: NAT is only possible if a WAN interface is involved. NAT between two LAN interfaces is not supported.
The CLI under (/Setup/IP-Router/Firewall/Action-Table) provides the variable %Y as an action.
