Fortinet black logo

Handbook

NAT

NAT

A number of network address translation (NAT) methods map packet IP address information for the packets that are received at the ingress network interface into the IP address space you configure. Packets with the new IP address are forwarded through the egress interface.

You can configure NAT per virtual server within the virtual server configuration.

This section describes the system-wide, policy-based NAT feature. The system-wide feature supports:

  • SNAT—Translates the packet header source IP address to the configured address. See Configure source NAT.
  • 1-to-1 NAT—Maps the public IP address for an interface to an IP address on a private network. See Configure 1-to-1 NAT.
  • Port forwarding—Maps an external published protocol port to the actual port. Configuration for port forwarding is included in the configuration for 1-to-1 NAT.

NAT

A number of network address translation (NAT) methods map packet IP address information for the packets that are received at the ingress network interface into the IP address space you configure. Packets with the new IP address are forwarded through the egress interface.

You can configure NAT per virtual server within the virtual server configuration.

This section describes the system-wide, policy-based NAT feature. The system-wide feature supports:

  • SNAT—Translates the packet header source IP address to the configured address. See Configure source NAT.
  • 1-to-1 NAT—Maps the public IP address for an interface to an IP address on a private network. See Configure 1-to-1 NAT.
  • Port forwarding—Maps an external published protocol port to the actual port. Configuration for port forwarding is included in the configuration for 1-to-1 NAT.