{"id":31629,"date":"2019-10-31T21:42:14","date_gmt":"2019-10-31T18:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/8-check-point-getting-started-r80-20-nat\/"},"modified":"2019-10-31T21:42:14","modified_gmt":"2019-10-31T18:42:14","slug":"8-check-point-getting-started-r80-20-nat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","title":{"rendered":"8. Punct de control \u00cenceput R80.20. NAT","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"8.
\n
\nBun venit la a 8-a lec\u021bie. Lec\u021bia este foarte important\u0103, deoarece, dup\u0103 finalizarea ei, ve\u021bi putea configura accesul la internet pentru utilizatorii dvs.! Trebuie s\u0103 recunosc c\u0103 mul\u021bi se opresc aici cu aceast\u0103 configurare \ud83d\ude42 Dar noi nu facem parte din ace\u0219tia! \u0218i avem multe lucruri interesante \u00een fa\u021b\u0103. Acum s\u0103 trecem la subiectul lec\u021biei noastre.<\/p>\n

A\u0219a cum probabil a\u021bi ghicit, ceea ce vom discuta ast\u0103zi este NAT. Sunt sigur c\u0103 to\u021bi cei care urm\u0103resc aceast\u0103 lec\u021bie \u0219tiu ce este NAT. Prin urmare, nu ne vom detalia cum func\u021bioneaz\u0103. Voi repeta doar \u00eenc\u0103 o dat\u0103 c\u0103 NAT este o tehnologie de traducere a adreselor, care a fost inventat\u0103 cu scopul de a economisi \u201eadresele albe\u201d, adic\u0103 adreselor IP publice (acele adrese care sunt rutate \u00een re\u021beaua Internet). <\/p>\n

\u00cen lec\u021bia precedent\u0103, a\u021bi observat probabil c\u0103 NAT este parte a politicii de Control al Accesului. Este destul de logic. \u00cen SmartConsole, set\u0103rile NAT sunt \u00eentr-o tab separat\u0103. Ast\u0103zi, trebuie s\u0103 vizit\u0103m acest loc. \u00cen general, \u00een aceast\u0103 lec\u021bie vom discuta despre tipurile de NAT, vom configura accesul la Internet \u0219i vom analiza un exemplu clasic de port forwarding. Adic\u0103, func\u021bionalitatea care este cel mai frecvent utilizat\u0103 \u00een companii. S\u0103 \u00eencepem.
\n<\/a><\/noindex><\/p>\n

Dou\u0103 moduri de configurare a NAT<\/h3>\n

\nCheck Point suport\u0103 dou\u0103 moduri de configurare a NAT: NAT automat<\/b> \u0219i NAT manual<\/b>. Fiecare dintre aceste metode are dou\u0103 tipuri de traducere: Hide NAT<\/b> \u0219i Static NAT<\/b>. \u00cen forma general\u0103, aceasta arat\u0103 ca \u00een aceast\u0103 imagine:<\/p>\n

\"8.
\n
\n\u00cen\u021beleg c\u0103 deocamdat\u0103 totul pare destul de complicat, a\u0219a c\u0103 haide\u021bi s\u0103 examin\u0103m fiecare tip mai \u00een detaliu.<\/p>\n

NAT automat<\/h3>\n

\nAceasta este cea mai rapid\u0103 \u0219i simpl\u0103 metod\u0103. Configurarea NAT se realizaz\u0103 practic \u00een dou\u0103 click-uri. Tot ce trebuie s\u0103 face\u021bi este s\u0103 deschide\u021bi propriet\u0103\u021bile obiectului dorit (fie c\u0103 este gateway, re\u021bea, host etc.), s\u0103 accesa\u021bi tab-ul NAT \u0219i s\u0103 bifa\u021bi \u201eAd\u0103uga\u021bi reguli de traducere automat\u0103 a adreselor<\/b>\u201d. Aici ve\u021bi vedea c\u00e2mpul - metoda de traducere. A\u0219a cum a fost men\u021bionat mai sus, sunt dou\u0103.<\/p>\n

\"8.
\n<\/p>\n

1. Aitomatic Hide NAT<\/h4>\n

\nImplicit, aceasta este Hide. Adic\u0103, \u00een acest caz, re\u021beaua noastr\u0103 se va \u201eascunde\u201d \u00een spatele unei adrese IP publice. Aceast\u0103 adres\u0103 poate fi preluat\u0103 de la interfa\u021ba extern\u0103 a gateway-ului, sau se poate specifica alta. Acest tip de NAT este adesea numit dinamic sau many-to-one<\/b>, deoarece mai multe adrese interne sunt traduse \u00eentr-o singur\u0103 adres\u0103 extern\u0103. Evident, acest lucru este posibil datorit\u0103 utiliz\u0103rii porturilor diferite \u00een timpul traducerii. Hide NAT func\u021bioneaz\u0103 doar \u00eentr-o direc\u021bie (din interior spre exterior) \u0219i este ideal pentru re\u021belele locale, c\u00e2nd trebuie s\u0103 asigura\u021bi accesul la Internet. Dac\u0103 traficul este ini\u021biat dintr-o re\u021bea extern\u0103, atunci NAT, desigur, nu va func\u021biona. Astfel, ofer\u0103 o protec\u021bie suplimentar\u0103 pentru re\u021belele interne.<\/p>\n

2. NAT Static Automatic<\/h4>\n

\nHide NAT este excelent, dar este posibil s\u0103 ave\u021bi nevoie s\u0103 asigura\u021bi acces din re\u021beaua extern\u0103 c\u0103tre un anumit server intern. De exemplu, c\u0103tre un server DMZ, a\u0219a cum este \u00een exemplul nostru. \u00cen acest caz, NAT Static poate fi de ajutor. Acesta se configureaz\u0103, de asemenea, destul de simplu. Este suficient s\u0103 modifica\u021bi metoda de traducere \u00een propriet\u0103\u021bile obiectului la Static \u0219i s\u0103 specifica\u021bi adresa IP public\u0103 care va fi utilizat\u0103 pentru NAT (vezi imaginea de mai sus). A\u0219adar, dac\u0103 cineva din re\u021beaua extern\u0103 acceseaz\u0103 aceast\u0103 adres\u0103 (pe orice port!), solicitarea va fi redirec\u021bionat\u0103 c\u0103tre serverul cu adresa IP intern\u0103. De asemenea, dac\u0103 serverul va ie\u0219i pe Internet, adresa sa IP va fi schimbat\u0103 cu cea specificat\u0103 de noi. A\u0219adar, acesta este un NAT \u00een ambele direc\u021bii. Este denumit \u0219i one-to-one<\/b> \u0219i uneori este folosit pentru servere publice. De ce \u201euneori\u201d? Pentru c\u0103 are un dezavantaj major \u2014 adresa IP public\u0103 este complet ocupat\u0103 (toate porturile). Nu se poate utiliza o singur\u0103 adres\u0103 public\u0103 pentru servere interne diferite (cu porturi diferite). De exemplu HTTP, FTP, SSH, SMTP etc. Aceast\u0103 problem\u0103 poate fi rezolvat\u0103 cu NAT Manual.<\/p>\n

NAT manual<\/h3>\n

\nParticularitatea NAT Manual este c\u0103 trebuie s\u0103 crea\u021bi singur regulile de traducere. \u00cen aceea\u0219i fil\u0103 NAT din Politica de Control al Accesului. \u00cen acest caz, NAT Manual permite crearea unor reguli de traducere mai complexe. Ave\u021bi acces la c\u00e2mpuri precum: Original Source, Original Destination, Original Services, Translated Source, Translated Destination, Translated Services. <\/p>\n

\"8.
\n
\nAici sunt, de asemenea, posibile dou\u0103 tipuri de NAT \u2014 Hide \u0219i Static.<\/p>\n

1. NAT Manual Hide<\/h4>\n

\nHide NAT \u00een acest caz poate fi utilizat \u00een diverse situa\u021bii. Iat\u0103 c\u00e2teva exemple:<\/p>\n

    \n
  1. C\u00e2nd accesa\u021bi un anumit resource din re\u021beaua local\u0103, dori\u021bi s\u0103 folosi\u021bi o alt\u0103 adres\u0103 pentru traducere (diferit\u0103 de cea folosit\u0103 pentru toate celelalte cazuri).<\/li>\n
  2. \u00cen re\u021beaua local\u0103 exist\u0103 un num\u0103r enorm de computere. Automatic Hide NAT nu se potrive\u0219te aici, deoarece cu aceast\u0103 configurare poate fi alocat doar o singur\u0103 adres\u0103 IP public\u0103, dup\u0103 care se vor \u201eascunde\u201d computerele. Este posibil s\u0103 nu existe suficient de multe porturi pentru transmisie. A\u0219a cum \u0219ti\u021bi, exist\u0103 pu\u021bin mai mult de 65 de mii. \u00cen acela\u0219i timp, fiecare computer poate genera sute de sesiuni. Manual Hide NAT permite \u00een c\u00e2mpul Translated Source s\u0103 aloce un pool de publice. de adrese IP<\/a>. Astfel, se va cre\u0219te num\u0103rul de NAT-uri posibile.<\/li>\n<\/ol>\n

    <\/p>\n

    2. Manual Static NAT<\/h4>\n

    \nStatic NAT este folosit mult mai frecvent la crearea manual\u0103 a regulilor de transmisie. Un exemplu clasic este redirec\u021bionarea porturilor. Situa\u021bia \u00een care din re\u021beaua extern\u0103 se acceseaz\u0103 o adres\u0103 IP public\u0103 (care poate apar\u021bine unui gateway) pe un anumit port, iar cererea este transmis\u0103 c\u0103tre o resurs\u0103 intern\u0103. \u00cen lucrarea noastr\u0103 de laborator, vom redirec\u021biona portul 80 c\u0103tre serverul DMZ.<\/p>\n

    Videoul lec\u021biei<\/h3>\n

    \n

    \r\n \"Reda\u021bi\r\n
    <\/div>\r\n <\/div><\/center>
    \nR\u0103m\u00e2ne\u021bi conecta\u021bi pentru mai multe \u0219i al\u0103tura\u021bi-v\u0103 canalului nostru     YouTube<\/a><\/noindex> \ud83d\ude42
    \n
    Sursa:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 8-\u0439 \u0443\u0440\u043e\u043a. \u0423\u0440\u043e\u043a \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u044b\u0439, \u0442.\u043a. \u043f\u043e \u0435\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044e \u0432\u044b \u0443\u0436\u0435 \u0441\u043c\u043e\u0436\u0435\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0434\u043b\u044f \u0432\u0430\u0448\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439! \u041d\u0430\u0434\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043d\u0430 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442 \ud83d\ude42 \u041d\u043e \u043c\u044b \u043d\u0435 \u0438\u0437 \u0438\u0445 \u0447\u0438\u0441\u043b\u0430! \u0418 \u0443 \u043d\u0430\u0441 \u0435\u0449\u0435 \u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u0432\u043f\u0435\u0440\u0435\u0434\u0438. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u043a \u0442\u0435\u043c\u0435 \u043d\u0430\u0448\u0435\u0433\u043e \u0443\u0440\u043e\u043a\u0430. \u041a\u0430\u043a \u0432\u044b \u0443\u0436\u0435 \u043d\u0430\u0432\u0435\u0440\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23547,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31629","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd478. Check Point Getting Started R80.20. NAT | ProHoster","description":"Bine a\u021bi venit la a 8-a lec\u021bie.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd478. Check Point Getting Started R80.20. NAT | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 8-\u0439 \u0443\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:14+00:00","article:modified_time":"2019-10-31T18:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31629","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:40:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:13:29","updated":"2026-02-08 20:40:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31629","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=31629"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31629\/revisions"}],"predecessor-version":[{"id":157992,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/31629\/revisions\/157992"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/23547"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=31629"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=31629"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=31629"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}