TOPIC: Two WAN Connections

Hi guys,

Would like to know that can a firewall with one port connected to internet and another port connected to a private WAN? Both ports to use NAT.

Is it possible.

Thanks.

NAT is always used on the outside interface. The firewall will always ask you to identify your inside (trusted) interface and outside (untrusted) interface then it will apply NAT to your outside interface.

Hi taq,

It depends which firewall you're referring to... On a Cisco firewalls (PIX, ASA or FWSM) you can NAT whatever you want on whatever interface you want. You'll have to use "static" and/or "global" commands.

Non Cisco firewalls like Juniper Netscreen or Checkpoints allow this as well.


If you use a Cisco router as firewall, then you have to define some interfaces as "outside" and other as "inside" interfaces. The NAT is only possible when a packets flows from an inside interface to an outside interface or from an outside interface to an inside interface. For this you'll use the "ip nat source ..." and "ip nat destination ..." commands.

Hi all,

Thanks for the reply. It really helps.

Regards.