View Single Post
  #17 (permalink)  
Old 2006-08-15
solara solara is offline
Junior Member
 
Join Date: 2006-05-20
Posts: 11
Rep Power: 0
solara has an average reputation (10+)
Default Re: Dont make the mistake I made with CCSA NGX

Quote:
Originally Posted by david
the correct answer is E.
otherwise the packets will be send back out to the internet as the firewall will see the public address as the destination & route back out.
so if you had the following

publc_ip=1.2.3.4 xlate_ip=192.1.2.3, you would need a static route to point 1.2.3.4 to your internal interface
So is statement 'You clear the box Translate destination on client side' what requires you to add a static route? Because you wouldn't normally need to add a static route to the firewall for automatic NAT to work correctly.
Reply With Quote