identity nat

Author
ehsan230564
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2021/03/10 04:12:13
  • Status: offline
2021/04/17 02:43:43 (permalink)
0

identity nat

Dear Sir,
 
Is there is any option like identity nat in cisco. that is for a particular destination source ip should be nat to itself and destination ip too. so that if traffic going for internet it will be nat. but if traffic for particualer destination like vpn tunnel should go through tunnel without nat. VPN tunnel is created between cisco router to cisco router and fortigate firewall is behind cisco router and configure for internet  load balancing.
 
Thanks and best regards
 
#1

1 Reply Related Threads

    emnoc
    Expert Member
    • Total Posts : 6097
    • Scores: 414
    • Reward points: 0
    • Joined: 2008/03/20 13:30:33
    • Location: AUSTIN TX AREA
    • Status: online
    Re: identity nat 2021/04/17 03:43:59 (permalink)
    0
    Yes you can do that in a firewall policy based on traffic. You can mangle src.ip and|or dst.ip as required and use egress-interface or natpools.
     
    https://docs.fortinet.com/document/fortigate/6.0.0/handbook/801437/ip-pools
     
    Ken Felix
     

    PCNSE 
    NSE 
    StrongSwan  
    #2
    Jump to:
    © 2021 APG vNext Commercial Version 5.5