topic Re: NAT Configuration: Need information in General Topics

NAT Configuration: Need information

paloalto.nis — Thu, 13 Jun 2013 09:12:50 GMT

Hello everyone,

I need confirmation on configuration.
I attach a picture to this discussion.

Can you confirm that the 2 first menstrual sufficient for the proper functioning of an email server in the DMZ (not to mention filtering rules)?

Also, the first two rules can replace the last?

Thank you in advance for your help.

Re: NAT Configuration: Need information

UhMayYeah — Thu, 13 Jun 2013 10:11:04 GMT

first two rules can replace the last

Re: NAT Configuration: Need information

Gregoux — Thu, 13 Jun 2013 14:25:19 GMT

You could keep only the last one, bidirectionnal allow you to minimize the number of NAT rule

it's better

Re: NAT Configuration: Need information

paloalto.nis — Thu, 13 Jun 2013 16:10:10 GMT

Thank you for your return.

One last question, if I understand the "dynamic IP" option, if I put in 'Source Address' multiple servers, so must I translating many public IPs ?

Can you confirm this?
Thank you all.

Re: NAT Configuration: Need information

UhMayYeah — Thu, 13 Jun 2013 17:49:57 GMT

dynamic-ip : Pool Based Source NAT.

1Private:1Pool IP

If Pool is exhausted ,no more outbound connections.

Dynamic IP +Port :Source NAT with Port-Translation

Multiple Private Source--->Single Public IP + dynamic Port

HTH

Re: NAT Configuration: Need information

Gregoux — Fri, 14 Jun 2013 07:12:41 GMT

static translation is used to translate 1 ip to another one

the dynamic translation is a same but base on a range of ip or a subnet to be translated base on a pool of ip

but in this case if the pool is exhausted then you can switch to an alternate methode like dinamic ip and port translation.

dinamic port translation allow you to translate with only one ip and modified the source port for the tranlation.

Re: NAT Configuration: Need information

paloalto.nis — Fri, 14 Jun 2013 07:44:18 GMT

Thank you for your help, it is very clear!