| Check Point - Client vs Server Side NAT |
| Vendor | Check Point |
| Platform | N/A |
| Version | R65 |
| Firewalls - Checkpoint |
| Wednesday, 30 July 2008 14:09 |
IntroductionClient and Server side NAT relates to when we perform destination NAT`ing. Client Side NAT - The destination address is NAT`d by the inbound Kernel
Note : Source NAT always happens on the Outbound Kernel. So why does this matter ?Well when we use client side NAT the IP address is NAT`d before it hits the routing table. So we can route the packet based on the real IP. To explain things a little easier have a look at the diagram below,
So we want to access the server (10.8.8.1). If we use Client Side NAT the inbound kernel will NAT the destination IP (192.168.8.1) to the real IP (10.8.8.1) and then pass the packet to the (OS) routing table. Which as you can see will have the routing entry for this subnet and pass it out (via the outbound kernel) to the interface (eth0). But if we use Server Side NAT the packet would not get NAT`d by the inbound kernel. It would get to the (OS) routing table with a destination of 192.168.8.1. Which, there is no entry for. We would need to add an entry to the routing table. Once added the operating system would know where to route this packet, the packet would pass through the outbound kernel which would NAT the destination IP to 10.8.8.1. Note: Client AND Server side NAT are options ONLY for destination NAT.Additional
|
Latest Articles
- Tool - SSLReport
- Brocade ADX - How to perform an image upgrade
- Cisco ASA reboots/crashes when running the command 'show service-policy interface outside set connection detail'
- Brocade ADX - Persistence
- How to define a port range on a Juniper SRX
- Path MTU Discovery (PMTUD) / Path MTU Black Holes
- Mitigating DoS attacks on a Cisco ASA
- How do I clear the Cisco ASA connection counters ?
- High CPU Usage on a Cisco CSS
- How to clone a MySQL database
- Brocade ADX - Configuring SSL
- Brocade ADX - Content Switching Rewrite
- Joomla - How to add a custom field
- BigIP F5 LTM - How to Create a Sorry Page with Image
- BigIP F5 LTM - TCP Syslog
- Cisco ASA - Traffic blocked when TCP syslog server is unreachable
- Excel - Unable to open file
- Brocade ADX - DoS Protection
- Brocade ADX - LoadBalancing Methods
- Brocade ADX - Healthcheck Elements
Popular
- Proxy ARP – SPLAT
- Check Point Commands
- IPSO - Commands
- ASA 8.3 - How to configure NAT
- vSphere - Creating User and Group Permissions
- PEMU - Free Cisco PIX Firewall Emulator / Simulator
- Juniper Netscreen Commands
- Juniper - NAT Explained
- Configuring Wireless Connectivity within Backtrack 4 r2
- ESX Convertor - The session is not authenticated
- How do I install snmpwalk / snmpget using Yum ?
- Netscreen - NSRP
- ESX - ViClient Cannot connect to host
- Troubleshooting a Netscreen Site 2 Site VPN
- Endpoint Connect Installation / Troubleshooting Guide
- ESXi - Connecting to a named pipe
- Check Point - How to Reset SIC
- ESXi White Box - HP DL140
- DNS / nslookup - How to find the root servers ?
- Netscreen - Routing Basics / Virtual Routers / PBR


