Comments on: Policy NAT and Twice NAT

By: NAAMILA

NAAMILA — Fri, 15 Aug 2025 05:59:12 +0000

Excellent articles.. Superb

By: Frank

Frank — Thu, 09 Mar 2023 11:54:30 +0000

hello dear ED, thanks for your article, it's really great stuff to learn! i have a question: for the inbound packet, we use the destination of the packet to make the NAT decision, right? -------Every type of NAT we have discussed so far have two things in common. The first is that only the source of the packet is used to make a NAT decision. The second is that only the source of the outbound packet is translated.

By: Ed Harmoush

Ed Harmoush — Wed, 15 Dec 2021 20:29:04 +0000

In reply to Sumit Dhotre. Sure, I don't see why not =).

By: Sumit Dhotre

Sumit Dhotre — Wed, 15 Dec 2021 04:54:33 +0000

Good article Ed,

I want to know if Dynamic source NAT can be used in twice NAT Policy?

By: Ed Harmoush

Ed Harmoush — Thu, 26 Aug 2021 23:38:28 +0000

In reply to MOHAMMAD AQUIB. Excellent. Glad to hear it =)

By: MOHAMMAD AQUIB

MOHAMMAD AQUIB — Sun, 22 Aug 2021 05:01:57 +0000

This articles series really helped me to clear all doubts regarding NAT

By: Ed Harmoush

Ed Harmoush — Tue, 13 Jul 2021 23:22:18 +0000

In reply to TheSuperHero. Hi =). CGN is on the ever growing list of things I'd like to write about some day =).

By: TheSuperHero

TheSuperHero — Sat, 10 Jul 2021 12:18:58 +0000

Could you please make an article about carrier-grade NAT? it’s really confusing and I know your explanation could be easy to understand. Thanks

By: Ed Harmoush

Ed Harmoush — Thu, 01 Jul 2021 22:09:44 +0000

In reply to Tanya. Correct. On the way in, packets destined to 213.180.204.11:443 will only be translated to one of 192.168.1.1:443 or 192.168.1.2:443... not both. On the way out, depending on the platform you are using, it might work or it might not even let you configure the translation because of the duplicate global attributes (213.180.204.11:443)

By: Tanya

Tanya — Thu, 01 Jul 2021 09:06:33 +0000

In reply to Tanya. >>e.g. 192.168.1.1 and 192.168.1.1 I mean 192.168.1.1 and 192.168.2.1 of course