FORTINET FW SNAT (SOURCE NAT) 飞塔防火墙源地址转换

关键配置如下：

fwa # show
config system global
    set hostname “fwa”
end
config system interface
edit “port1”
        set ip 10.1.1.254 255.255.255.0
set allowaccess ping https telnet
next
edit “port2”
        set ip 20.0.0.1 255.255.255.0
set allowaccess ping
next
end
config firewall address
    edit “inuser“
        set subnet 10.1.1.0 255.255.255.0
next
end
config firewall ippool
    edit “snat_pool“
        set startip 20.0.0.2
        set endip 20.0.0.2
next
end
config firewall policy
edit 10
        set srcintf “port1”
        set dstintf “port2”
        set srcaddr “inuser“
        set dstaddr “all”
        set action accept
        set schedule “always”
        set service “ALL”
        set nat enable
        set ippool enable
        set poolname “snat_pool“
next
end
config router static
edit 10
        set device “port2”
        set gateway 20.0.0.100
next
end