IP Redirect?

dotdash

I am doing 1:1 because I have different services which use the same ports…ie port 80 going to 2 different machines.

yeah, but you can specify the VIP to use in the port-fwd without using a 1-1.

hoba

correct, portforwards work for virtual IPs as well and so will natreflection once you are using it instead of 1:1 nat.

kapara

Ok…So I can still use 1:1 NAT but nat reflection will not work for those. It only works when using forwarding. Is that correct?

Thanks,

Mark

GruensFroeschli

yes.
But you "can" use 1:1 NAT and make on top of that the forwardings. (to invoke the NAT-reflection)

hoba

I wouldn't use 1:1 nat for single port forwards (e.g. a webserver). It's much more flexible to use portforwards as you this way can still map multiple servers to different ports on the same public IP (in case you are running out of public IPs).

kapara

I only use 1:1 nat for specific outbound traffic like mail server. Makes sense to use port forwarding for inbound..ie webserver.

hoba

You can accomplish this by using portforwards for inbound traffic and advanced outbound nat for outbound traffic as well.

kapara

So is there a reason one would use one of them over the other?

hoba

I would only use 1:1 nat if I really need to translate all ports from one ip to another. If I only need few ports I would always go with portforwards and advanced outbound nat if needed as this is more flexible like I already said (and it works with nat reflection ;) ).

kapara

ahhh… I get it...ie DMZ port

kapara

Forgot to say thank you..

Thanks,

Mark