NAT RuleBase

[JoeBloggssss]

Hi,

I have several Intranet segments (10.x.x.x) I am creating automated NAT rules. Just wondering, if I create a supernetted network object (10.0.0.0/8) what are the issues I need to be aware of, the clear benefit is rule reduction and time saving, of course this requires a network using a single address space with no VLSM, so may not be the most networking efficent. Thanks

 

[shaggerTM]

Don't use automatic NAT rules, they are hard to control and they make rule implications that are neither apparent nor usually desirable.

If you simply want to hide anything within the 10.0.0.0/8 range, make a separate network object and use it in a manual NAT rule.

If you need help making a tight working rulebase, visit my website.



========================================
Find out about what I do for a living at

http://www.ascltd.co.uk

========================================