{"id":31629,"date":"2019-10-31T21:42:14","date_gmt":"2019-10-31T18:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/8-check-point-getting-started-r80-20-nat\/"},"modified":"2019-10-31T21:42:14","modified_gmt":"2019-10-31T18:42:14","slug":"8-check-point-getting-started-r80-20-nat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","title":{"rendered":"8. Check Point S\u0101kt R80.20. NAT","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"8.
\n
\nLaipni l\u016bdzam 8. nodarb\u012bb\u0101. \u0160\u012b nodarb\u012bba ir \u013coti svar\u012bga, jo p\u0113c t\u0101s pabeig\u0161anas j\u016bs jau var\u0113siet iestat\u012bt interneta piek\u013cuvi saviem lietot\u0101jiem! J\u0101atz\u012bst, ka daudzi \u0161aj\u0101 br\u012bd\u012b beidz iestat\u012bjumu \ud83d\ude42 Bet m\u0113s neesam vi\u0146u vid\u016b! Mums v\u0113l ir daudz interesanta priek\u0161\u0101. Tagad p\u0101riesim pie m\u016bsu nodarb\u012bbas t\u0113mas.<\/p>\n

K\u0101 j\u016bs jau, iesp\u0113jams, esat uzmin\u0113ju\u0161i, \u0161odien run\u0101sim par NAT. Esmu p\u0101rliecin\u0101ts, ka visi, kas skat\u0101s \u0161o nodarb\u012bbu, zina, kas ir NAT. T\u0101p\u0113c m\u0113s neaprakst\u012bsim, k\u0101 tas darbojas. Es v\u0113lreiz atk\u0101rto\u0161u, ka NAT ir adre\u0161u transl\u0101cijas tehnolo\u0123ija, kas izstr\u0101d\u0101ta ar m\u0113r\u0137i taup\u012bt \u201cbalt\u0101s\u201d, t.i., publisk\u0101s IP adreses (t\u0101s adreses, kuras tiek mar\u0161rut\u0113tas internet\u0101). <\/p>\n

Iepriek\u0161\u0113j\u0101 nodarb\u012bb\u0101, iesp\u0113jams, jau paman\u012bj\u0101t, ka NAT iek\u013caujas piek\u013cuves kontroles politik\u0101. Tas ir lo\u0123iski. SmartConsole NAT iestat\u012bjumi ir izcelti atsevi\u0161\u0137\u0101 ciln\u0113. \u0160odien m\u0113s noteikti tur iegrimsim. Kopum\u0101 \u0161aj\u0101 nodarb\u012bb\u0101 m\u0113s apspried\u012bsim NAT tipus, iestat\u012bsim piek\u013cuvi internetam un apskat\u012bsim klasisko piem\u0113ru ar portu p\u0101rvirz\u012b\u0161anu. T.i., to funkcionalit\u0101ti, ko visbie\u017e\u0101k izmanto uz\u0146\u0113mumos. \u0136ersimies pie darba.
\n<\/a><\/noindex><\/p>\n

Divi NAT iestat\u012b\u0161anas veidi<\/h3>\n

\nCheck Point atbalsta divus NAT iestat\u012b\u0161anas veidus: Autom\u0101tiskais NAT<\/b> un Manu\u0101lais NAT<\/b>. Katram no \u0161iem veidiem ir divi transl\u0101cijas tipi: Hide NAT<\/b> un Statisk\u0101 NAT<\/b>. Visp\u0101r\u012bg\u0101 izpratn\u0113 tas izskat\u0101s k\u0101 \u0161aj\u0101 att\u0113l\u0101:<\/p>\n

\"8.
\n
\nSaprotu, ka, visticam\u0101k, \u0161obr\u012bd viss izskat\u0101s diezgan sare\u017e\u0123\u012bti, t\u0101p\u0113c apl\u016bkosim katru tipu nedaudz s\u012bk\u0101k.<\/p>\n

Autom\u0101tiskais NAT<\/h3>\n

\nTas ir vis\u0101tr\u0101kais un vienk\u0101r\u0161\u0101kais veids. NAT iestat\u012b\u0161ana tiek veikta burtiski divu klik\u0161\u0137u laik\u0101. Viss, kas jums j\u0101dara, ir atv\u0113rt attiec\u012bg\u0101 objekta (b\u016bt vai nu v\u0101rteja, t\u012bkls, hosts utt.) \u012bpa\u0161\u012bbas, p\u0101riet uz NAT cilni un atz\u012bm\u0113t r\u016bti\u0146u \u201cPievienot autom\u0101tisk\u0101s adreses transl\u0101cijas noteikumus<\/b>\u201d. \u0160eit j\u016bs, k\u0101 jau tika teikts, redz\u0113siet lauku \u2014 transl\u0101cijas metodi. Ir, k\u0101 jau min\u0113ts iepriek\u0161, divas.<\/p>\n

\"8.
\n<\/p>\n

1. Autom\u0101tiska Hide NAT<\/h4>\n

\nP\u0113c noklus\u0113juma tas ir Hide. T.i., \u0161\u0101d\u0101 gad\u012bjum\u0101 m\u016bsu t\u012bkls \u201csl\u0113psies\u201d aiz k\u0101da publiska IP adreses. \u0160aj\u0101 gad\u012bjum\u0101 adrese var tikt \u0146emta no v\u0101rtejas \u0101r\u0113j\u0101 interfeisa vai var nor\u0101d\u012bt k\u0101du citu. \u0160\u0101da veida NAT bie\u017ei d\u0113v\u0113 par dinamisko vai p\u0101ra uz vienu<\/b>, jo vair\u0101ki iek\u0161\u0113jie adresi tiek p\u0101rveidoti par vienu \u0101r\u0113jo. Protams, tas ir iesp\u0113jams, izmantojot da\u017e\u0101dus portus p\u0101rveides laik\u0101. Hide NAT darbojas tikai vien\u0101 virzien\u0101 (no iek\u0161puses uz \u0101rpusi) un ir ide\u0101li piem\u0113rots viet\u0113j\u0101m t\u012bklam, kad ir nepiecie\u0161ams vienk\u0101r\u0161i nodro\u0161in\u0101t piek\u013cuvi internetam. Ja trafiks tiks inici\u0113ts no \u0101rpuses, tad NAT, protams, nedarbosies. T\u0101d\u0113j\u0101di tas nodro\u0161ina papildu aizsardz\u012bbu iek\u0161\u0113jiem t\u012bkliem.<\/p>\n

2. Autom\u0101tiska statisk\u0101 NAT<\/h4>\n

\nHide NAT ir labs, bet iesp\u0113jams, ka jums ir nepiecie\u0161ams nodro\u0161in\u0101t piek\u013cuvi no \u0101r\u0113j\u0101 t\u012bkla k\u0101dam iek\u0161\u0113jam serverim. Piem\u0113ram, DMZ serverim, k\u0101 m\u016bsu piem\u0113r\u0101. \u0160aj\u0101 gad\u012bjum\u0101 var pal\u012bdz\u0113t Static NAT. To ir diezgan vienk\u0101r\u0161i konfigur\u0113t. Pietiek main\u012bt p\u0101rveides metodi objektu \u012bpa\u0161\u012bb\u0101s uz Static un nor\u0101d\u012bt publisku IP adresi, kas tiks izmantota NAT (skat\u012bt att\u0113lu augst\u0101k). T.i., ja k\u0101ds no \u0101r\u0113j\u0101 t\u012bkla piek\u013c\u016bst \u0161ai adresei (neatkar\u012bgi no porta!), piepras\u012bjums tiks p\u0101rs\u016bt\u012bts uz serveri ar iek\u0161\u0113jo IP adresi. Taj\u0101 pa\u0161\u0101 laik\u0101, ja pats serveris iziet internet\u0101, t\u0101 IP adrese ar\u012b tiks main\u012bta uz nor\u0101d\u012bto adresi. T.i., tas ir NAT abos virzienos. To v\u0113l d\u0113v\u0113 par one-to-one<\/b> un da\u017ereiz izmanto publiskiem serveriem. K\u0101p\u0113c \u201cda\u017ereiz\u201d? Jo tam ir viens liels tr\u016bkums \u2014 publisk\u0101 IP adrese tiek piln\u012bb\u0101 izmantota (visi porti). Nav iesp\u0113jams izmantot vienu publisku adresi da\u017e\u0101diem iek\u0161\u0113jiem serveriem (ar da\u017e\u0101diem portiem). Piem\u0113ram, HTTP, FTP, SSH, SMTP utt. \u0160o probl\u0113mu var atrisin\u0101t ar Manual NAT.<\/p>\n

Manu\u0101lais NAT<\/h3>\n

\nManual NAT at\u0161\u0137ir\u012bba ir t\u0101da, ka ir j\u0101veido p\u0101rveides noteikumi pa\u0161am. Taj\u0101 pa\u0161\u0101 NAT ciln\u0113 Access Control Policy. Manual NAT \u013cauj izveidot sare\u017e\u0123\u012bt\u0101kus p\u0101rveides noteikumus. Jums ir pieejami t\u0101di lauki k\u0101: Original Source, Original Destination, Original Services, Translated Source, Translated Destination, Translated Services. <\/p>\n

\"8.
\n
\n\u0160eit ar\u012b ir iesp\u0113jami divi NAT tipi \u2014 Hide un Static.<\/p>\n

1. Roku darbs Hide NAT<\/h4>\n

\nHide NAT \u0161aj\u0101 gad\u012bjum\u0101 var tikt izmantots da\u017e\u0101d\u0101s situ\u0101cij\u0101s. Da\u017ei piem\u0113ri:<\/p>\n

    \n
  1. Kad j\u016bs piek\u013c\u016bstat k\u0101dam konkr\u0113tam resursam no viet\u0113j\u0101 t\u012bkla, v\u0113laties izmantot citu adresi p\u0101rveidei (at\u0161\u0137ir\u012bgu no t\u0101s, kas tiek izmantota visos citos gad\u012bjumos).<\/li>\n
  2. Lok\u0101laj\u0101 t\u012bkl\u0101 ir milz\u012bgs skaits datoru. Automatic Hide NAT \u0161aj\u0101 gad\u012bjum\u0101 nav piem\u0113rots, jo ar \u0161\u0101du iestat\u012bjumu var pie\u0161\u0137irt tikai vienu publisko IP adresi, aiz kuras pasl\u0113psies datori. Portu skaits, kas nepiecie\u0161ams p\u0101rs\u016bt\u012b\u0161anai, var vienk\u0101r\u0161i nepietikt. K\u0101 j\u016bs atceraties, to ir nedaudz vair\u0101k par 65 t\u016bksto\u0161iem. Taj\u0101 pa\u0161\u0101 laik\u0101 katrs dators var \u0123ener\u0113t simtus sesiju. Manual Hide NAT \u013cauj lauk\u0101 Translated Source noteikt publisko IP adresu rezervi. IP adreses<\/a>. T\u0101d\u0113j\u0101di palielinot iesp\u0113jam\u0101s NAT p\u0101rs\u016bt\u012b\u0161anas skaitu.<\/li>\n<\/ol>\n

    <\/p>\n

    2. Manual Static NAT<\/h4>\n

    \nStatic NAT tiek izmantots daudz bie\u017e\u0101k, kad tiek roku izveidoti p\u0101rs\u016bt\u012b\u0161anas noteikumi. Klasisks piem\u0113rs - portu p\u0101rs\u016bt\u012b\u0161ana. Gad\u012bjums, kad no \u0101r\u0113j\u0101 t\u012bkla piepras\u012bjumi tiek s\u016bt\u012bti uz publisko IP adresi (kura var pieder\u0113t v\u0101rtiem) noteikt\u0101 port\u0101 un piepras\u012bjums tiek p\u0101rs\u016bt\u012bts uz iek\u0161\u0113jo resursu. M\u016bsu laboratorijas darb\u0101 m\u0113s p\u0101rs\u016bt\u012bsim 80. portu uz DMZ serveri.<\/p>\n

    Video m\u0101c\u012bba<\/h3>\n

    \n

    \r\n \"Atska\u0146ot\r\n
    <\/div>\r\n <\/div><\/center>
    \nSekojiet l\u012bdzi jauniem materi\u0101liem un pievienojieties m\u016bsu     YouTube kan\u0101lam<\/a><\/noindex> \ud83d\ude42
    \n
    Avots:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 8-\u0439 \u0443\u0440\u043e\u043a. \u0423\u0440\u043e\u043a \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u044b\u0439, \u0442.\u043a. \u043f\u043e \u0435\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044e \u0432\u044b \u0443\u0436\u0435 \u0441\u043c\u043e\u0436\u0435\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0434\u043b\u044f \u0432\u0430\u0448\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439! \u041d\u0430\u0434\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043d\u0430 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442 \ud83d\ude42 \u041d\u043e \u043c\u044b \u043d\u0435 \u0438\u0437 \u0438\u0445 \u0447\u0438\u0441\u043b\u0430! \u0418 \u0443 \u043d\u0430\u0441 \u0435\u0449\u0435 \u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u0432\u043f\u0435\u0440\u0435\u0434\u0438. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u043a \u0442\u0435\u043c\u0435 \u043d\u0430\u0448\u0435\u0433\u043e \u0443\u0440\u043e\u043a\u0430. \u041a\u0430\u043a \u0432\u044b \u0443\u0436\u0435 \u043d\u0430\u0432\u0435\u0440\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23547,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31629","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd478. Check Point Getting Started R80.20. NAT | ProHoster","description":"Laipni l\u016bdzam 8. nodarb\u012bb\u0101.","canonical_url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"lv_LV","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd478. Check Point Getting Started R80.20. NAT | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 8-\u0439 \u0443\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/lv\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:14+00:00","article:modified_time":"2019-10-31T18:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31629","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:40:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:13:29","updated":"2026-02-08 20:40:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/31629","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/comments?post=31629"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/31629\/revisions"}],"predecessor-version":[{"id":157992,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/posts\/31629\/revisions\/157992"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media\/23547"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/media?parent=31629"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/categories?post=31629"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/lv\/wp-json\/wp\/v2\/tags?post=31629"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}