| F5 BIG-IP – Apply SNAT to client subnet or IP |
In certain scenarios it can be interesting or necessary to apply SNAT only to certain client IPs when accesing a virtual server to f.e. avoid assymetric routes, when the server gateway is not the F5… (take a look at this link for more examples).
These are the steps (im using BIG IP v13)…
I prefer the … Read more
| Checkpoint – Hide NAT vs Static NAT |
This post tries to be a simple explanation of the Hide NAT and Static NAT concepts.
Given the following simple company network let’s see how this NAT types could fit in this scenario:
|
| Checkpoint – Proxy ARP for manual NAT on VSX |
In my post Checkpoint – Automatic NAT vs Manual NAT I explained both types of NAT clarifying that the Manual NAT makes neccesary the Proxy ARP entry configuration. This example is for a Checkpoint VSX cluster scenario.
This is an example that was used:
The IP that should be configured to answer to ARP request is the 80.80.100.100 (No server … Read more
|
| Checkpoint – Automatic NAT vs Manual NAT |
NAT (Network Address Translation) can be configured in our Checkpoint FW in 2 two different ways: Manual or Automatic
To configure the automatic NAT, the SERVER object properties has a NAT section.
So for example, if we want our host with internal private IP 10.10.50.50 to be published in Internet with public IP 80.80.100.100:
(I we only wanted … Read more