topic Re: 1600 gateway NAT setting confusion in Spark Firewall (SMB)

1600 gateway NAT setting confusion

nflnetwork29 — Mon, 13 Feb 2023 21:28:53 GMT

hello,

I'm configuring a bunch of 1600's (quantum spark) in a hub and spoke type of topology.

1600's at the branches and 6200 at HQ. (ALL INTERNET TRAFFIC FLOWS VIA HQ)

and i see two NAT settings on the 1600's and i'm not quite sure how they should be set.

1 - under internet connection > advanced settings

2 - under access policy

Do I want these both off?

Re: 1600 gateway NAT setting confusion

PhoneBoy — Tue, 14 Feb 2023 01:34:09 GMT

You can turn both of these off, yes.
These rules are meant for Internet access from the LAN or other networks behind the device.

Re: 1600 gateway NAT setting confusion

nflnetwork29 — Tue, 14 Feb 2023 03:48:56 GMT

that's fine but what happens if they conflict - which one takes priority?

Re: 1600 gateway NAT setting confusion

PhoneBoy — Tue, 14 Feb 2023 14:33:13 GMT

I presume the one under Access Policy applies to all Internet connections versus the one under the specific Internet connection, which just applies to that one.

Re: 1600 gateway NAT setting confusion

the_rock — Tue, 14 Feb 2023 14:50:49 GMT

As @PhoneBoy mentioned, the one under access policy would apply to EVERYTHING internal being natted when going outbound, so its more broad and would take precedence.

Re: 1600 gateway NAT setting confusion

G_W_Albrecht — Tue, 14 Feb 2023 16:06:43 GMT

Currently, both are set to the same: Do NOT hide internal networks = Hide internal Networks OFF

With one ISP, one should change if the other is changed...