EXPWY-E NAT

[YAARUB F. MILAD]

Hello,

We are deploying EXPWY-E  on a DMZ between 2 FWs . NAT is configured on the FW facing the Internet so is it required to dedicate an interface that is to be natted and another for internal communication with EXPWY-C . in other words is it required to have 2 interfaces even when NAT is happening on the external FW.

Thanks

[Gordon Ross]

Expressway is designed with the intention of any necessary NAT being between the Expressway C & E and not in front of the Expressway-E.

(If you put a NAT in front of Expressway-E, you're kind of defeating the point of Expressway-E)

GTG

[YAARUB F. MILAD]

Expressway-E is private IP would only be natted when going to Internet. if its communicating internally or lets say backward to EXPWY C its not going to be natted its goig to use its private IP.

We plan to NAT the EXPWY-Es Private IP on the FW facing the internet