Address translation

[ciscobond]

in checkpoint there is address translation available and also static/dynamic NAT available.

1.whats the difference in that ???

2.a local ip is not NATed with Public IP and configured for address translation,the user is getting internet access how??

3. if a local ip is NATed static with public IP but not address translated,he is not getting access to internet ,why???

 

[ChrisAC]

With Checkpoint you have basically two type of NAT, 'Hide' NAT and 'Static' NAT.

With 'Hide'NAT a network or group of objects hides behind one external address, so this is just like PAT on a PIX or Cisco router. Many internal IP addresses at NATed to one external address. Your user will be subject to a hide NAT rule somewhere, maybe on the network object?

'Static' NAT is the same as on Cisco kit. You translate one public IP address to one internal IP address, like a mail server or web server. When you select 'Static' on an object in Firewall-1 this is the same as doing 'static (inside, outside)' on a PIX.

Chris.




**********************
Chris Andrew, CCNA, CCSA
chris@iproute.co.uk
**********************

 

[ciscobond]

Thank you dear