PORT FORWARD NETWORK UTILITIES 9 MANUAL

Please note, the nat (inside,outside) part of these commands are a lot easier to read in 8.3.

To create a one to one NAT within the object like when you have a webserver in your DMZ you can do the following NAT configuration. Note: the В“interfaceВ” command is the 2nd interface in the nat statement, in this case the outside. New 8.3 equivalent command: object network inside-net subnet 10.0.0.0 255.255.255.0 nat (inside,outside) dynamic interface To create a many-to-one NAT where the entire inside network is getting PATВ’d to a single outside IP do the following. Auto NAT is also sometimes referenced as В“Network Object NATВ” because the configuration is done within the network object. There are two major variants of auto NAT: dynamic and static.

Auto NAT is when the NAT command appears INSIDE the object statement on the firewall.

PORT FORWARD NETWORK UTILITIES 9 MANUAL

Manual is done in global configuration and can NAT either the source IPs and destination IPs. Auto is done inside the object and cannot take into consideration the destination of the traffic. There are two major kinds of NAT in 8.3+ Auto NAT and Manual NAT.

Port forward network utilities 9