CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > NAT (Network Address Translation)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-09-25
Member
 
Join Date: 2006-09-25
Posts: 42
Rep Power: 0
Brentd has an average reputation (10+)
Default Client side translation/routing?

I was trying to find information on when the NAT and routing decisions were made in the GW (relative to each other) and how client side NAT modifies this (if at all).

Doing destination NAT, does the NAT happen before the routing decisions are made or the other way around, and does client side NAT change this order??

Thanks
Brent

Last edited by Brentd; 2006-09-25 at 19:22.
Reply With Quote
  #2 (permalink)  
Old 2006-09-26
Senior Member
 
Join Date: 2006-07-28
Location: New Zealand
Posts: 854
Rep Power: 3
northlandboy has an average reputation (10+)
Default Re: Client side translation/routing?

If you've got client-side NAT turned on (the default) it does the NAT first, then makes a routing decision based on the translated destination.

This makes life easy.

If you turn it off, it makes a routing decision based on the address before it's done any NATting - so you end up having to put a whole lot of /32 routes in for your NATs.

Use "translate on client side", it makes your life much easier. I can't think why you would do it the other way, unless you've upgraded a 4.1 system, and stupidity^Winertia has stopped you changing it.
Reply With Quote
  #3 (permalink)  
Old 2006-09-26
Member
 
Join Date: 2006-09-25
Posts: 42
Rep Power: 0
Brentd has an average reputation (10+)
Default Re: Client side translation/routing?

Thanks for your help!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 10:15.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0