Lesson 4 of 14
Not started
Network Address Translation (NAT)
Apply source and destination NAT in both policy-based and central-NAT modes, understand VIPs and IP pools, inspect the session table, and troubleshoot translation.
SNAT rewrites the source address (and usually port) of outbound traffic so private RFC-1918 hosts can reach the internet. The two approaches:
- Firewall policy NAT (per-policy): enable
set nat enableon the policy. By default it uses the outgoing interface IP; enable IP Pool to translate to a different public address or range.
- Central SNAT: a separate Central SNAT table decouples NAT from the policy, which is useful when many policies need the same translation logic.
IP pool types matter: overload (PAT, many-to-one, the default), one-to-one, fixed-port-range, and port-block-allocation (PBA) for carrier-scale deployments.
By default, what source address does policy-based NAT use for outbound traffic?
Which IP pool type performs many-to-one PAT?