NAT preference

[sujithka]

Hi,

I have a small doubt. As all of us know we have two types of NAT in CP. One is manual ad the othre automatic. My question is that when we have both the kinds of NAT configured for an object, which NAT type will take preference.Or will the CP throw up an error message when we try to do the same.

Regards,
Sujith

[gavvys]

Hi
Well you can create the manual and automatic NATTING of a object, but it will come into picture when rules are folllowed, whichever rule comes first will be executed.The rules are followed from top to bottom.

I hope your query is resolved, if you have any issue please let me know.

regards
Ranjit

[chrissamuel]

Automatic NAT rules take precedence as they appear at the start of the rulebase, not sure why you would want automatic and manual on the same object, you need to use manual really if you want to make use of bidirectional NAT.

[eduardw]

Originally Posted by chrissamuel

Automatic NAT rules take precedence as they appear at the start of the rulebase, not sure why you would want automatic and manual on the same object, you need to use manual really if you want to make use of bidirectional NAT.

That is not entirely true you can move the manual nat rules in front of the automatic rules. Use the add new rule on top and then move al the manual rules above the automatic rules. One of the reasons to use both is that you can use manual rules so that not al traffic will be translated.
With manual nat rules the order of the rules is important first matching rule will be applied for automatic nat rules the whole policy is used


Eduard