topic Re: static NAT vs hide behind an IP in General Topics

static NAT vs hide behind an IP

Matthew_Do — Thu, 04 Oct 2018 02:58:24 GMT

Can someone explain?

I understand when a host "hide behind the GWY and hide behind the IP", but not the difference between the following config. Are they not the same?

Vladimir — Thu, 04 Oct 2018 03:05:34 GMT

Hide is used to "overload" single IP for outbound traffic.

Static is used for inbound connections to the servers you are hosting.

If you have a number of public IPs and you are hosting a server behind the gateway that the external clients must connect to, you use Static NAT.

I.e.: You have 222.222.222.0/24 public range, your gateway is 222.222.222.1, your internal network is 10.0.0.0/24 and your DMZ is 192.168.255.0/24.

You configure Web server in DMZ with IP of 192.168.255.2 and Statically NAT it to 222.222.222.2.

Your internal network 10.0.0.0/24 is Hiding behind gateway's IP of 222.222.222.1.

Inbound traffic to your web server will be translated to its private IP address 192.168.255.2.

Matthew_Do — Thu, 04 Oct 2018 13:35:22 GMT

ah, I got it. The first line in your response reminds me everything I've learned. Thank you!

Hide is used to "overload" a single external IP.