F5 BIG-IP icon   F5 BIG-IP – Apply SNAT to client subnet or IP



In certain scenarios it can be interesting or necessary to apply SNAT only to certain client IPs when accesing a virtual server to  f.e. avoid assymetric routes, when the server gateway is not the F5… (take a look at this link for more examples).

These are the steps (im using BIG IP v13)…

Create a SNAT pool

I prefer the … Read more

Checkpoint   Checkpoint – Hide NAT vs Static NAT



This post tries to be a simple explanation of the Hide NAT and Static NAT concepts.
Given the following simple company network let's see how this NAT types could fit in this scenario:

Hide Static NAT example scenario

  • We need the web server to be published, so it needs to be accesible from the Internet
  • We need all the workstations to be able to browse
Read more

Checkpoint   Checkpoint – Proxy ARP for manual NAT on VSX



In my post Checkpoint – Automatic NAT vs Manual NAT I explained both types of NAT clarifying that the Manual NAT makes neccesary the Proxy ARP entry configuration. This example is for a Checkpoint VSX cluster scenario.

This is an example that was used:
Checkpoint host general properties
Checkpoint NAT rule

The IP that should be configured to answer to ARP request is the 80.80.100.100 (No server … Read more

Checkpoint   Checkpoint – Automatic NAT vs Manual NAT



NAT (Network Address Translation) can be configured in our Checkpoint FW in 2 two different ways: Manual or Automatic

Automatic NAT

To configure the automatic NAT, the SERVER object properties has a NAT section.
So for example, if we want our host with internal private IP 10.10.50.50 to be published in Internet with public IP 80.80.100.100:

Checkpoint host general properties

Checkpoint host NAT properties

(I we only wanted Read more