---
title: conf/appliance/nat.cfg
slug: ps/help/en_us/vtm/config/confappliancenatcfg
docTags: 
createdAt: 2026-08-02T08:50:32.306Z
---

The NAT configuration file stores rules controlling NAT on an appliance.

| Key                                     | Description                                                                                                                                                                                                              |
| --------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| many\_to\_one\_overload!\*!pool         | Pool of a "many to one overload" type NAT rule.<br />Value type: string<br />Default value: \<none>                                                                                                                      |
| many\_to\_one\_overload!\*!tip          | TIP Group of a "many to one overload" type NAT rule.<br />Value type: string<br />Default value: \<none>                                                                                                                 |
| many\_to\_one\_port\_locked!\*!pool     | Pool of a "many to one port locked" type NAT rule.<br />Value type: string<br />Default value: \<none>                                                                                                                   |
| many\_to\_one\_port\_locked!\*!port     | Port number of a "many to one port locked" type NAT rule.<br />Value type: unsigned integer<br />Default value: \<none>                                                                                                  |
| many\_to\_one\_port\_locked!\*!protocol | Protocol of a "many to one port locked" type NAT rule.<br />Value type: enumeration<br />Default value: \<none><br />Permitted values:<br />tcp: TCP<br />udp: UDP<br />udplite: UDPLITE<br />sctp: SCTP<br />icmp: ICMP |
| many\_to\_one\_port\_locked!\*!tip      | TIP Group of a "many to one port locked" type NAT rule.<br />Value type: string<br />Default value: \<none>                                                                                                              |
| one\_to\_one!\*!enable\_inbound         | Enabling the inbound part of a "one to one" type NAT rule.<br />Value type: Yes / No<br />Default value: \<none>                                                                                                         |
| one\_to\_one!\*!ip                      | IP Address of a "one to one" type NAT rule.<br />Value type: string<br />Default value: \<none>                                                                                                                          |
| one\_to\_one!\*!tip                     | TIP group of a "one to one" type NAT rule.<br />Value type: string<br />Default value: \<none>                                                                                                                           |
| port\_mapping!\*!dport\_first           | First port of the dest. port range of a "port mapping" rule.<br />Value type: unsigned integer<br />Default value: \<none>                                                                                               |
| port\_mapping!\*!dport\_last            | Last port of the dest. port range of a "port mapping" rule.<br />Value type: unsigned integer<br />Default value: \<none>                                                                                                |
| port\_mapping!\*!virtual\_server        | Target Virtual Server of a "port mapping" rule.<br />Value type: string<br />Default value: \<none>                                                                                                                      |