NAT-Hide

Forum|Forum|20 years ago
April 3, 2006
3 replies
5314 views

hello, I just wanted to know if it' s possible to have a NAT-Hide feature like CheckPoint FW-1 does. That' s selecting a set of internal IP' s and NAT them with an specific external IP. I know we can do it just with an internal IP mapped to an external IP when using Virtual-IP Fortigate feature. Since we can' t map several internal IP' s to one external IP using Virtual-IP ( and we just want that for outgoing packets ),we don' t know how to deal with this subject. Thx BR

A

Anonymous_UserAuthor

Contributor III

Simply enable ' NAT' in policy and do nothing more, it is equal to Checkpoint' s hide. The FG will just use external interface IP as the source of all outgoing traffic.

A

Anonymous_UserAuthor

Contributor III

what about if I want to use an " specific" IP?

A

Anonymous_UserAuthor

Contributor III

Hi Francisco, The " Hidden-Like" NAT in Fortinet, can be reached using " IP Pools" , yo can set a range of IP Addresses for the pool (or just only one -> Start IP and End IP are the same), be careful when choosing the " interface" this must match the Destination port when you create the Firewall Policy later. If you want to Hidde via the IP Pool created a range of internal IPÂ´s all you need is create a Address Group with this addresses. I think the IP Pool for NAT you need willÂ´be in the same LAN Range of your destination interface right ? else this wonÂ´t work. I hope this can help you. Hugo

Sign up

Login with SSO

Login to the community

Login with SSO