{"id":31629,"date":"2019-10-31T21:42:14","date_gmt":"2019-10-31T18:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/8-check-point-getting-started-r80-20-nat\/"},"modified":"2019-10-31T21:42:14","modified_gmt":"2019-10-31T18:42:14","slug":"8-check-point-getting-started-r80-20-nat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","title":{"rendered":"8. Check Point Getting Started R80.20. NAT","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"8.
\n
\nTere tulemast 8. \u00f5ppetundi. See \u00f5ppetund on v\u00e4ga oluline, kuna selle l\u00f5petamisel suudate juba seadistada interneti\u00fchenduse oma kasutajatele! Pean tunnistama, et paljud l\u00f5petavad seadistamise just siinkohal \ud83d\ude42 Kuid meie ei kuulu nende hulka! Meil on ees veel palju huvitavat. N\u00fc\u00fcd aga meie \u00f5ppetunni teemasse.<\/p>\n

Nagu te ehk juba arvasite, r\u00e4\u00e4gime t\u00e4na NAT-ist. Olen kindel, et k\u00f5ik, kes seda \u00f5ppetundi vaatavad, teavad, mis on NAT. Seet\u00f5ttu ei hakka me \u00fcksikasjalikult seletama, kuidas see t\u00f6\u00f6tab. Kordan vaid, et NAT on aadresside t\u00f5lke tehnoloogia, mis loodi eesm\u00e4rgiga s\u00e4\u00e4sta 'valgeid', st avalikke IP-aadresse (need aadressid, mida marsruutitakse internetis). <\/p>\n

Eelmisel \u00f5ppetunnil olete ilmselt juba m\u00e4rganud, et NAT on osa juurdep\u00e4\u00e4su kontrolli poliitikast. See on \u00fcsna loogiline. SmartConsole'is on NAT seaded viidud eraldi vahekaardile. T\u00e4na k\u00fclastame seda kindlasti. \u00dcldiselt arutame k\u00e4esolevas \u00f5ppetunnis NAT t\u00fc\u00fcpide \u00fcle, seadistame interneti\u00fchenduse ja vaatame klassikalist n\u00e4idet port forwarding'ust. St funktsioon, mida ettev\u00f5tetes k\u00f5ige sagedamini kasutatakse. Alustame.
\n<\/a><\/noindex><\/p>\n

Kaks meetodit NAT-i seadistamiseks<\/h3>\n

\nCheck Point toetab NAT-i seadistamiseks kahte meetodit: Automaatne NAT<\/b> ja Manuaalne NAT<\/b>. Igal neist meetoditest on kaks t\u00fc\u00fcpi t\u00f5lkimist: Peidetud NAT<\/b> ja Statiline NAT<\/b>. \u00dcldiselt n\u00e4eb see v\u00e4lja nagu sellel pildil:<\/p>\n

\"8.
\n
\nM\u00f5istan, et see v\u00f5ib praegu tunduda \u00fcsna keeruline, seega vaatame iga t\u00fc\u00fcpi veidi l\u00e4hemalt.<\/p>\n

Automaatne NAT<\/h3>\n

\nSee on k\u00f5ige kiirem ja lihtsam meetod. NAT-i seadistamine toimub s\u00f5na otseses m\u00f5ttes kahe hiirekl\u00f5psuga. K\u00f5ik, mis peate tegema, on avada soovitud objekti omadused (olgu selleks gateway, network, host jne), minna NAT vahelehele ja m\u00e4rkida ruut \u201cLisa automaatsed aadressit\u00f5lke reeglid<\/b>\u201d. Siin n\u00e4ete ka v\u00e4lja - t\u00f5lke meetod. Nagu juba eespool mainitud, on neid kaks.<\/p>\n

\"8.
\n<\/p>\n

Automaatne Peidetud NAT<\/h4>\n

\nEeldatavasti on see peidetud. See t\u00e4hendab, et meie v\u00f5rk \u201cpeidab\u201d end mingi avaliku IP-aadressi taha. Aadress v\u00f5ib olla seotud ruuteri v\u00e4lise liidese, v\u00f5i v\u00f5ite m\u00e4\u00e4rata m\u00f5ne muu. Seda t\u00fc\u00fcpi NAT-i nimetatakse sageli d\u00fcnaamiliseks v\u00f5i mitmest \u00fchele<\/b>, kuna mitmed siseaadressid t\u00f5lgitakse \u00fcheks v\u00e4ljaspool asuvaks. Loomulikult on see v\u00f5imalik t\u00e4nu erinevate portide kasutamisele t\u00f5lkimisel. Hide NAT t\u00f6\u00f6tab ainult \u00fches suunas (seest v\u00e4ljas) ja sobib ideaalselt kohalikele v\u00f5rkudele, kui on vajalik lihtsalt tagada juurdep\u00e4\u00e4s Internetile. Kui liiklus algatatakse v\u00e4lisest v\u00f5rgust, siis NAT loomulikult ei toimi. See on justkui t\u00e4iendav kaitse sisev\u00f5rkudele.<\/p>\n

2. Automaatne staatiline NAT<\/h4>\n

\nHide NAT on hea k\u00f5ik h\u00e4sti, kuid v\u00f5ib-olla peate tagama juurdep\u00e4\u00e4su v\u00e4lisest v\u00f5rgust m\u00f5nele sisemisele serverile. N\u00e4iteks DMZ-serverile, nagu meie n\u00e4ites. Sel juhul v\u00f5ib meile abiks olla Static NAT. Selle seadistamine on samuti \u00fcsna lihtne. Piisab, kui muudad objekti omadustes t\u00f5lke meetodi Statiliseks ja saadad avaliku IP-aadressi, mida kasutatakse NAT-i jaoks (vt \u00fclalolevat pilti). Kui keegi v\u00e4lisest v\u00f5rgust p\u00f6\u00f6rdub sellele aadressile (\u00fcksk\u00f5ik millisel pordil!), siis p\u00e4ring suunatakse serverile, millel on juba sisemine IP-aadress. Samal ajal, kui server ise v\u00e4ljuvad Internetti, siis selle IP-aadress vahetub samuti meie m\u00e4\u00e4ratud aadressiga. See on NAT m\u00f5lemas suunas. Seda kutsutakse ka one-to-one<\/b> ja m\u00f5nikord kasutatakse seda avalike serverite jaoks. Miks \"m\u00f5nikord\"? Sest sellel on \u00fcks suur puudus \u2014 avalik IP-aadress on t\u00e4ielikult h\u00f5ivatud (k\u00f5ik pordid). \u00dchte avalikku aadressi ei saa kasutada erinevate sisemiste serverite jaoks (erinevate pordidega). N\u00e4iteks HTTP, FTP, SSH, SMTP jne. Selle probleemi lahendamiseks v\u00f5ib kasutada Manual NAT.<\/p>\n

Manuaalne NAT<\/h3>\n

\nManual NATi omadus on selles, et peate ise looma t\u00f5lkereeglid. Selleks peate minema NAT vahekaardile Access Control Policy. Manual NAT v\u00f5imaldab luua keerukamaid t\u00f5lkereegleid. Teil on saadaval j\u00e4rgmised v\u00e4ljad: Originaalne Allikas, Originaalne Sihtkoht, Originaalsed Teenused, T\u00f5lgitud Allikas, T\u00f5lgitud Sihtkoht, T\u00f5lgitud Teenused. <\/p>\n

\"8.
\n
\nSiin on samuti v\u00f5imalikud kaks t\u00fc\u00fcpi NAT - Hide ja Static.<\/p>\n

1. Manual Hide NAT<\/h4>\n

\nHide NATi v\u00f5ib antud juhul kasutada erinevates olukordades. Siin on m\u00f5ned n\u00e4ited:<\/p>\n

    \n
  1. Kui p\u00f6\u00f6rdute m\u00f5ne konkreetse ressursi poole kohalikust v\u00f5rgust, soovite kasutada teist aadressi t\u00f5lkimiseks (erinevat sellest, mida kasutatakse k\u00f5igi \u00fclej\u00e4\u00e4nud juhtumite puhul).<\/li>\n
  2. Kohalikus v\u00f5rgus on tohutult palju arvuteid. Automatic Hide NAT siin ei sobi, kuna sellise seadistuse puhul on v\u00f5imalik kasutada vaid \u00fchte avalikku IP-aadressi, mille taha \u201cpeidavad\u201d ennast arvutid. T\u00f5lkimiseks ei pruugi lihtsalt piisata portidest. Nagu te m\u00e4letate, on neid veidi \u00fcle 65 tuhande. Iga arvuti v\u00f5ib samal ajal genereerida sadu seansse. Manual Hide NAT v\u00f5imaldab v\u00e4ljendada avalike aadresside palli v\u00e4ljas T\u00f5lgitud Allikas. IP-aadresse<\/a>. Sellega suurendades v\u00f5imalike NAT-t\u00f5lgete arvu.<\/li>\n<\/ol>\n

    <\/p>\n

    2. Manual Static NAT<\/h4>\n

    \nStatic NAT kasutatakse sagedamini k\u00e4sitsi loodud t\u00f5lke reeglite korral. Klassikaline n\u00e4ide on portide edasi suunamine. Juhtum, kus v\u00e4lisest v\u00f5rgust p\u00f6\u00f6rdutakse avaliku IP-aadressi (mis v\u00f5ib kuuluda p\u00e4\u00e4supunktile) m\u00e4\u00e4ratud sadama kaudu ning p\u00e4ring t\u00f5lgitakse sisemisele ressursile. Meie laborit\u00f6\u00f6s suuname 80. sadama DMZ serverisse.<\/p>\n

    Videokursus<\/h3>\n

    \n

    \r\n \"Vaata\r\n
    <\/div>\r\n <\/div><\/center>
    \nJ\u00e4tkake j\u00e4lgimist ja liituge meie     YouTube'i kanaliga<\/a><\/noindex> \ud83d\ude42
    \n
    Allikas:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 8-\u0439 \u0443\u0440\u043e\u043a. \u0423\u0440\u043e\u043a \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u044b\u0439, \u0442.\u043a. \u043f\u043e \u0435\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044e \u0432\u044b \u0443\u0436\u0435 \u0441\u043c\u043e\u0436\u0435\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0434\u043b\u044f \u0432\u0430\u0448\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439! \u041d\u0430\u0434\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043d\u0430 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442 \ud83d\ude42 \u041d\u043e \u043c\u044b \u043d\u0435 \u0438\u0437 \u0438\u0445 \u0447\u0438\u0441\u043b\u0430! \u0418 \u0443 \u043d\u0430\u0441 \u0435\u0449\u0435 \u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u0432\u043f\u0435\u0440\u0435\u0434\u0438. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u043a \u0442\u0435\u043c\u0435 \u043d\u0430\u0448\u0435\u0433\u043e \u0443\u0440\u043e\u043a\u0430. \u041a\u0430\u043a \u0432\u044b \u0443\u0436\u0435 \u043d\u0430\u0432\u0435\u0440\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23547,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31629","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd478. Check Point Getting Started R80.20. NAT | ProHoster","description":"Tere tulemast kaheksanda tunni juurde.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd478. Check Point Getting Started R80.20. NAT | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 8-\u0439 \u0443\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:14+00:00","article:modified_time":"2019-10-31T18:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31629","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:40:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:13:29","updated":"2026-02-08 20:40:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31629","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=31629"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31629\/revisions"}],"predecessor-version":[{"id":157992,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/31629\/revisions\/157992"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/23547"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=31629"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=31629"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=31629"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}