Skip to main content
horinius
horinius
New Member
October 9, 2012
Question

Destination NAT and full NAT?

  • October 9, 2012
  • 2 replies
  • 5921 views
Hi. Right now I' m editting a firewall policy for " wan -> dmz" , and I don' t understand the NAT option. The manual writes this: " If you select a virtual IP as the Destination Address, but do not select the NAT option, the unit performs destination NAT (DNAT) rather than full NAT. Source NAT (SNAT) is not performed." What is " destination NAT" ? What is " full NAT" ? " destination NAT" means " port forwarding" ? And " full NAT" means " 1 to 1 NAT" ? Thanks in advance

    2 replies

    jmac
    jmac
    New Member
    October 9, 2012
    Destination NAT means the FortiGate changes the destination IP from the IP supplied in the original request to the translated IP of the VIP destination, but passed the source IP without change. Full NAT would also change the source IP to the address assigned to the FortiGate interface used for the destination route.
    horinius
    horiniusAuthor
    New Member
    October 9, 2012
    Thanks a lot :)
    Terms & ConditionsAccessibility statement