{"id":31629,"date":"2019-10-31T21:42:14","date_gmt":"2019-10-31T18:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/8-check-point-getting-started-r80-20-nat\/"},"modified":"2019-10-31T21:42:14","modified_gmt":"2019-10-31T18:42:14","slug":"8-check-point-getting-started-r80-20-nat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","title":{"rendered":"8. Check Pointi alustamine R80.20. NAT","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"8.
\n
\nTere tulemast 8. \u00f5ppetundi. See \u00f5ppetund on v\u00e4ga oluline, sest selle l\u00f5puks suudate juba oma kasutajatele interneti\u00fchendust seadistada! Tuleb tunnistada, et paljud l\u00f5petavad selle seadistamise siin \ud83d\ude42 Aga meie ei kuulu nende hulka! Meil on ees veel palju huvitavat. Ja n\u00fc\u00fcd l\u00e4heme meie \u00f5ppetunni teemasse.<\/p>\n

Kuidas te juba ilmselt arvasite, r\u00e4\u00e4gime t\u00e4na NAT-ist. Olen kindel, et k\u00f5ik, kes seda \u00f5ppetundi vaatavad, teavad, mis on NAT. Seet\u00f5ttu ei hakka me seda t\u00f6\u00f6p\u00f5him\u00f5tet detailselt selgitama. Kordan vaid, et NAT on aadresside t\u00f5lketehnoloogia, mis loodi avalike IP-aadresside (need aadressid, mis suunatakse internetis) kokkuhoiu eesm\u00e4rgil. <\/p>\n

Eelmisel \u00f5ppetunnil olete ilmselt juba m\u00e4rganud, et NAT kuulub Access Control poliitika alla. See on \u00fcsna loogiline. SmartConsole'is on NAT-i seaded eraldi vahekaart. T\u00e4na vaatame sinna kindlasti sisse. \u00dcldiselt arutame selles \u00f5ppetunnis NAT-i t\u00fc\u00fcpe, seadistame interneti\u00fchenduse ja vaatame klassikalist n\u00e4idet port forwarding-ist. See on funktsionaalsus, mida ettev\u00f5tetes k\u00f5ige sagedamini kasutatakse. Alustame.
\n<\/a><\/noindex><\/p>\n

Kaks meetodit NAT-i seadistamiseks<\/h3>\n

\nCheck Point toetab kahte meetodit NAT-i seadistamiseks: Automaatne NAT<\/b> ja K\u00e4sitsi NAT<\/b>. Igal neist meetoditest on kaks t\u00fc\u00fcpi t\u00f5lkimist: Hide NAT<\/b> ja Statiline NAT<\/b>. \u00dcldisel kujul n\u00e4eb see v\u00e4lja nagu pildil:<\/p>\n

\"8.
\n
\nM\u00f5istan, et see k\u00f5ik v\u00f5ib tunduda \u00fcsna keeruline, seega vaatame iga t\u00fc\u00fcpi natuke l\u00e4hemalt.<\/p>\n

Automaatne NAT<\/h3>\n

\nSee on k\u00f5ige kiirem ja lihtsam meetod. NAT-i seadistamine toimub s\u00f5na otseses m\u00f5ttes kahe hiireklikkimisega. K\u00f5ik, mida peate tegema, on avada soovitud objekti (olgu see gateway, v\u00f5rk, host jne) omadused, minna NAT-i vahekaardile ja m\u00e4rkida ruut \u201eAdd automatic address translation rules<\/b>\u201d. Just siin n\u00e4ete ka v\u00e4lja - t\u00f5lkemetoodika. Nagu juba varem \u00f6eldud, on neid kaks.<\/p>\n

\"8.
\n<\/p>\n

1. Automaatne Hide NAT<\/h4>\n

\nVaikimisi on see Hide. See t\u00e4hendab, et meie v\u00f5rk \u201epeidab\u201d end m\u00f5ne avaliku IP-aadressi taha. Samal ajal v\u00f5ib aadress olla v\u00f5etud l\u00fc\u00fcsi v\u00e4lisest liidesest v\u00f5i v\u00f5ite m\u00e4\u00e4rata m\u00f5ne muu. Seda t\u00fc\u00fcpi NAT-i nimetatakse sageli d\u00fcnaamiliseks v\u00f5i many-to-one<\/b>, kuna mitmeid sisemisi aadresse edastatakse \u00fchele v\u00e4lisele. Loomulikult on see v\u00f5imalik erinevate portide kasutamise kaudu edastamise ajal. Hide NAT t\u00f6\u00f6tab ainult \u00fches suunas (seest v\u00e4ljapoole) ja sobib ideaalselt kohalikele v\u00f5rkudele, kui on lihtsalt vaja tagada juurdep\u00e4\u00e4s Internetile. Kui liiklus algatatakse v\u00e4lisest v\u00f5rgust, siis NAT loomulikult ei toimi. See suurendab sisemiste v\u00f5rkude kaitset.<\/p>\n

2. Automaatne staatiline NAT<\/h4>\n

\nHide NAT on v\u00e4ga hea, kuid v\u00f5ib-olla soovite tagada juurdep\u00e4\u00e4su v\u00e4lisest v\u00f5rgust mingile sisemisele serverile. N\u00e4iteks DMZ-serverile, nagu meie n\u00e4ites. Sellisel juhul aitab meid staatiline NAT. Selle seadistamine on samuti \u00fcsna lihtne. Piisab, kui objektis muudetakse edastamismeetod staatiliseks ja m\u00e4\u00e4ratakse avalik IP-aadress, mida kasutatakse NAT-i jaoks (vt \u00fclal olevat pilti). See t\u00e4hendab, et kui keegi v\u00e4listest v\u00f5rkudest p\u00f6\u00f6rdub sellele aadressile (\u00fcksk\u00f5ik millise porti kaudu!), siis p\u00e4ring suunatakse serverile juba sisemise IP-aadressiga. Samuti, kui server v\u00e4ljub Internetti, muutub tema IP-aadress samuti meie m\u00e4\u00e4ratud aadressiks. See on NAT m\u00f5lemas suunas. Seda tuntakse ka kui \u00fcks-\u00fchele<\/b> ja seda kasutatakse m\u00f5nikord avalike serverite jaoks. Miks \"m\u00f5nikord\"? Sest sellel on \u00fcks suur puudus - avalik IP-aadress on t\u00e4ielikult h\u00f5ivatud (k\u00f5ik portid). \u00dchte avalikku aadressi ei saa kasutada erinevate sisemiste serverite (erinevate portide) jaoks. N\u00e4iteks HTTP, FTP, SSH, SMTP jne. Seda probleemi v\u00f5ib lahendada k\u00e4sitsi NAT.<\/p>\n

K\u00e4sitsi NAT<\/h3>\n

\nK\u00e4sitsi NAT-i erip\u00e4ra on see, et peate iseseisvalt looma edastamise reeglid. Samas NAT-i vahekaardil juurdep\u00e4\u00e4sukontrolli poliitikas. Samuti v\u00f5imaldab k\u00e4sitsi NAT luua keerukamaid edastamisreegleid. Teil on juurdep\u00e4\u00e4s sellistele v\u00e4ljadele nagu: Algne allikas, Algne sihtkoht, Algne teenused, T\u00f5lgitud allikas, T\u00f5lgitud sihtkoht, T\u00f5lgitud teenused. <\/p>\n

\"8.
\n
\nSiin on samuti v\u00f5imalikud kaks t\u00fc\u00fcpi NAT-i - Hide ja staatiline.<\/p>\n

1. K\u00e4sitsi Hide NAT<\/h4>\n

\nHide NAT-i saab kasutada erinevates olukordades. Siin on m\u00f5ned n\u00e4ited:<\/p>\n

    \n
  1. Kui p\u00f6\u00f6rdute konkreetsesse ressurssi kohaliku v\u00f5rgu kaudu, soovite kasutada edastamiseks muud aadressi (erinevat sellest, mida kasutatakse k\u00f5igi teiste juhtumite jaoks).<\/li>\n
  2. Kohalikus v\u00f5rgus on tohutult palju arvuteid. Automatic Hide NAT ei sobi siia, kuna sellise seadistusega on v\u00f5imalik kasutada vaid \u00fchte avalikku IP-aadressi, mille taga arvutid \u201epeidavad\u201c end. Portide kvant v\u00f5ib lihtsalt mitte piisata. Nagu te m\u00e4letate, on neid veidi rohkem kui 65 tuhat. Samal ajal saab iga arvuti genereerida sadu seansse. Manual Hide NAT v\u00f5imaldab v\u00e4lja panna avalike aadresside hulga v\u00e4ljale Translated Source. of IP addresses<\/a>. Nii et suurendame v\u00f5imalike NAT-t\u00f5lgete arvu.<\/li>\n<\/ol>\n

    <\/p>\n

    2. Manual Static NAT<\/h4>\n

    \nStatic NAT on k\u00e4sitsi t\u00f5lkereeglite loomisel palju sagedamini kasutatav. Klassikaline n\u00e4ide on portide edasi suunamine. Juhtum, kui v\u00e4listest v\u00f5rkudest p\u00f6\u00f6rdutakse avaliku IP-aadressi (mis v\u00f5ib kuuluda v\u00e4ravasse) kaudu kindlal pordil ja p\u00e4ring t\u00f5lgitakse sisemisele ressursile. Meie laboratoorses t\u00f6\u00f6s suuname 80. pordi DMZ-serveri poole.<\/p>\n

    Video \u00f5ppetund<\/h3>\n

    \n

    \r\n \"M\u00e4ngi\r\n
    <\/div>\r\n <\/div><\/center>
    \nJ\u00e4tkake meie j\u00e4lgimist ja liituge meiega     YouTube'i kanalis<\/a><\/noindex> \ud83d\ude42
    \n
    Allikas:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 8-\u0439 \u0443\u0440\u043e\u043a. \u0423\u0440\u043e\u043a \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u044b\u0439, \u0442.\u043a. \u043f\u043e \u0435\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044e \u0432\u044b \u0443\u0436\u0435 \u0441\u043c\u043e\u0436\u0435\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0434\u043b\u044f \u0432\u0430\u0448\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439! \u041d\u0430\u0434\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043d\u0430 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442 \ud83d\ude42 \u041d\u043e \u043c\u044b \u043d\u0435 \u0438\u0437 \u0438\u0445 \u0447\u0438\u0441\u043b\u0430! \u0418 \u0443 \u043d\u0430\u0441 \u0435\u0449\u0435 \u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u0432\u043f\u0435\u0440\u0435\u0434\u0438. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u043a \u0442\u0435\u043c\u0435 \u043d\u0430\u0448\u0435\u0433\u043e \u0443\u0440\u043e\u043a\u0430. \u041a\u0430\u043a \u0432\u044b \u0443\u0436\u0435 \u043d\u0430\u0432\u0435\u0440\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23547,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31629","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd478. Check Point Getting Started R80.20. NAT | ProHoster","description":"Tere tulemast 8. \u00f5ppetundi.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd478. Check Point Getting Started R80.20. NAT | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 8-\u0439 \u0443\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:14+00:00","article:modified_time":"2019-10-31T18:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31629","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:40:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:13:29","updated":"2026-02-08 20:40:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31629","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31629"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31629\/revisions"}],"predecessor-version":[{"id":157992,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31629\/revisions\/157992"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/23547"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31629"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31629"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31629"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}