NAT is always used on the outside interface. The firewall will always ask you to identify your inside (trusted) interface and outside (untrusted) interface then it will apply NAT to your outside interface. _________________ CCNA CERTIFIED.
CCNP ... Working on it!
It depends which firewall you're referring to... On a Cisco firewalls (PIX, ASA or FWSM) you can NAT whatever you want on whatever interface you want. You'll have to use "static" and/or "global" commands.
Non Cisco firewalls like Juniper Netscreen or Checkpoints allow this as well.
If you use a Cisco router as firewall, then you have to define some interfaces as "outside" and other as "inside" interfaces. The NAT is only possible when a packets flows from an inside interface to an outside interface or from an outside interface to an inside interface. For this you'll use the "ip nat source ..." and "ip nat destination ..." commands. _________________ Christophe Lemaire
http://www.exp-networks.be/blog/
View next topic View previous topic
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You can attach files in this forum You can download files in this forum
