Implementing NAT in Addition to ZBF

You can add Network Address Translation (NAT) to the same router that is performing ZBF. The simplest way to implement NAT is to use the outside interface of the firewall and overload on that address (Port Address Translation [PAT]). All packets going through the firewall toward the Internet would appear to the Internet as coming from the single global address of the router. The router may have obtained its global IP address via Dynamic Host Configuration Protocol (DHCP) from the service provider, or it may be statically configured. You can verify the address by looking at the details of the interface to determine how the IP address was obtained and what the current IP address is.

To configure NAT, navigate ...

Get Santos:CCNA Sec 210-260 OCG now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.