Firewall Concepts and Configuration - HP Operations Manager

Network Address Translation
Firewall Configuration in OVO
Network Address Translation
Network address translation (NAT) is often used with firewall systems in
combination with the port restrictions. It translates IP addresses that
are sent over the firewall.
Network address translation can be used to achieve the following:
Hide the complete IP range of one side of the firewall from the other
side.
Use an internal IP range that cannot be used on the Internet, so it
must be translated to a range that is available there.
NAT can be set up to translate only the IP addresses of one side of the
firewall or to translate all addresses as shown in Figure 1-7.
Figure 1-7 Firewall using NAT
Source IP Target IP
10.136.120.193
Data
192.168.1.3
Source IP Target IP
192.168.1.3
Data
10.136.120.193
Firewall
192.168.1.3 53.168.1.3
Source IP Target IP
10.136.120.193
Data
53.168.1.3
Source IP Target IP
53.168.1.3
Data
10.136.120.193
Chapter 1 43