{"id":31629,"date":"2019-10-31T21:42:14","date_gmt":"2019-10-31T18:42:14","guid":{"rendered":"https:\/\/prohoster.info\/blog\/8-check-point-getting-started-r80-20-nat\/"},"modified":"2019-10-31T21:42:14","modified_gmt":"2019-10-31T18:42:14","slug":"8-check-point-getting-started-r80-20-nat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","title":{"rendered":"8. Check Point Uvod u R80.20. NAT","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"8.
\n
\nDobrodo\u0161li na 8. lekciju. Ova lekcija je veoma va\u017ena, jer \u0107ete nakon nje mo\u0107i da konfiguri\u0161ete izlaz na internet za va\u0161e korisnike! Treba priznati da mnogi na tome i zavr\u0161avaju \ud83d\ude42 Ali mi ne spadamo u tu grupu! I imamo jo\u0161 mnogo zanimljivih stvari ispred nas. A sada, da pre\u0111emo na temu na\u0161e lekcije.<\/p>\n

Kao \u0161to ste verovatno ve\u0107 pretpostavili, danas \u0107emo govoriti o NAT-u. Siguran sam da svi koji prate ovu lekciju znaju \u0161ta je NAT. Zato ne\u0107emo detaljno obja\u0161njavati kako to funkcioni\u0161e. Ponovi\u0107u samo da je NAT tehnologija prevo\u0111enja adresa, koja je osmi\u0161ljena s ciljem \u0161tednje \u201cbelih\u201d, tj. javnih IP adresa (onih adresa koje su usmerene u internetu). <\/p>\n

U prethodnoj lekciji ste verovatno primetili da NAT ulazi u politiku Kontrole Pristupa. To je prili\u010dno logi\u010dno. U SmartConsole pode\u0161avanja NAT su sme\u0161tena u posebnoj kartici. Danas \u0107emo obavezno zaviriti tamo. U su\u0161tini, u ovoj lekciji \u0107emo razgovarati o tipovima NAT-a, konfigurisati izlaz na internet i razmotriti klasi\u010dan primer sa proslje\u0111ivanjem portova. To jest, onaj funkcionalnost koja se naj\u010de\u0161\u0107e koristi u kompanijama. Po\u010dnimo.
\n<\/a><\/noindex><\/p>\n

Dva na\u010dina pode\u0161avanja NAT-a<\/h3>\n

\nCheck Point podr\u017eava dva na\u010dina pode\u0161avanja NAT-a: Automatski NAT<\/b> in Ru\u010dno NAT<\/b>. Za svaki od ovih na\u010dina postoje dva tipa prevo\u0111enja: Hide NAT<\/b> in Staticki NAT<\/b>. U op\u0161tem izgledu ovo izgleda kao \u0161to je prikazano na ovoj slici:<\/p>\n

\"8.
\n
\nRazumem da mo\u017eda sve izgleda prili\u010dno komplikovano, tako da hajde da razmotrimo svaki tip malo detaljnije.<\/p>\n

Automatski NAT<\/h3>\n

\nOvo je najbr\u017ei i najlak\u0161i na\u010din. Pode\u0161avanje NAT-a mo\u017ee se obaviti bukvalno u dva klika. Sve \u0161to treba da uradite je da otvorite svojstva odgovaraju\u0107eg objekta (bilo da se radi o gateway-u, mre\u017ei, host-u itd.), pre\u0111ete na karticu NAT i ozna\u010dite opciju \u201cDodaj automatska pravila za prevo\u0111enje adresa<\/b>\u201d. Ovde \u0107ete upravo videti polje \u2014 metoda prevo\u0111enja. Kao \u0161to je ve\u0107 pomenuto, njih su dva.<\/p>\n

\"8.
\n<\/p>\n

1. Automatski Hide NAT<\/h4>\n

\nPodrazumevano je to Hide. To jest, u ovom slu\u010daju, na\u0161a mre\u017ea \u0107e se \u201csakriti\u201d iza nekog javnog IP adrese. Pri tom, adresa mo\u017ee biti uzeta sa spoljnog interfejsa gateway-a, ili mo\u017eete navesti neku drugu. Ovaj tip NAT-a \u010desto se naziva dinami\u010dkim ili many-to-one<\/b>, ker se ve\u010d notranjih naslovov preslika v en zunanji. Naravno je to mogo\u010de z uporabo razli\u010dnih vrat pri preslikavi. Hide NAT deluje samo v eno smer (iz notranjosti navzven) in je idealen za lokalne mre\u017ee, ko \u017eelite preprosto omogo\u010diti dostop do interneta. \u010ce se bo promet iniciiral iz zunanje mre\u017ee, NAT naravno ne bo deloval. Tako dobimo \u0161e dodatno za\u0161\u010dito notranjih mre\u017e.<\/p>\n

2. Avtomatski stati\u010dni NAT<\/h4>\n

\nHide NAT je odli\u010den, vendar morda \u017eelite omogo\u010diti dostop iz zunanje mre\u017ee do nekega notranjega stre\u017enika. Na primer, do DMZ-stre\u017enika, kot v na\u0161em primeru. V tem primeru nam lahko pomaga Static NAT. Nastavi se tudi precej enostavno. Dovolj je, da v lastnostih objekta spremenite metodo preslikave na Static in navedete javni IP-naslov, ki bo uporabljen za NAT (glej sliko zgoraj). To pomeni, da \u010de se kdo iz zunanje mre\u017ee obrne na ta naslov (po katerem koli portu!), bo zahteva preusmerjena na stre\u017enik z \u017ee notranjim IP-naslovom. Pri tem, \u010de se bo sam stre\u017enik povezoval z internetom, se njegov IP-naslov prav tako spremeni na tistega, ki smo ga navedli. To je NAT v obe smeri. To imenujemo tudi ena na ena<\/b> in se v\u010dasih uporablja za javne stre\u017enike. Zakaj \u201cv\u010dasih\u201d? Ker ima eno veliko pomanjkljivost \u2014 javni IP-naslov je popolnoma zaseden (vsa vrata). Ni mogo\u010de uporabljati enega javnega naslova za razli\u010dne notranje stre\u017enike (z razli\u010dnimi vrati). Na primer HTTP, FTP, SSH, SMTP itd. To te\u017eavo lahko re\u0161i Manual NAT.<\/p>\n

Ru\u010dno NAT<\/h3>\n

\nPosebnost Manual NAT je ta, da je potrebno samostojno ustvarjati pravila preslikave. Na tistem zavihku NAT v politiki nadzora dostopa. Pri tem Manual NAT omogo\u010da ustvarjanje bolj zapletenih pravil preslikave. Na voljo so vam naslednja polja: Izvorna destinacija, Izvorna destinacija, Izvorne storitve, Preslikani izvor, Preslikana destinacija, Preslikane storitve. <\/p>\n

\"8.
\n
\nTukaj so mo\u017ena tudi dva tipa NAT \u2014 Hide in Static.<\/p>\n

1. Ro\u010dni Hide NAT<\/h4>\n

\nHide NAT se v tem primeru lahko uporablja v razli\u010dnih situacijah. Nekaj primerov:<\/p>\n

    \n
  1. Ko se obrnite na nek konkreten vir iz lokalne mre\u017ee, \u017eelite uporabiti drugo naslov za preslikavo (razli\u010dno od tistega, ki se uporablja za vse druge primere).<\/li>\n
  2. V lokalnem omre\u017eju je ogromno \u0161tevilo ra\u010dunalnikov. Automatic Hide NAT tukaj ne bo deloval, saj tak\u0161na nastavitev omogo\u010da dodelitev le enega javnega IP-naslova, za katerim se bodo \"skrili\" ra\u010dunalniki. Morda preprosto ne bo dovolj vrat za prevajanje. Kot se spomnite, jih je nekoliko ve\u010d kot 65 tiso\u010d. Hkrati lahko vsak ra\u010dunalnik generira na stotine sej. Manual Hide NAT omogo\u010da na polju Translated Source dodelitev bazena javnih IP naslovov<\/a>. S tem se pove\u010da \u0161tevilo mo\u017enih NAT-prevodov.<\/li>\n<\/ol>\n

    <\/p>\n

    2. Manual Static NAT<\/h4>\n

    \nStatic NAT se veliko pogosteje uporablja pri ro\u010dnem ustvarjanju pravil za prevajanje. Klasi\u010den primer je preusmerjanje vrat. Situacija, ko iz zunanjega omre\u017eja dostopamo do javnega IP-naslova (ki je lahko v lasti prehodnega naprave) po dolo\u010denem portu in se zahteva preusmeri na notranji vir. V na\u0161i laboratorijski nalogi bomo preusmerili port 80 do DMZ stre\u017enika.<\/p>\n

    Video lekcija<\/h3>\n

    \n

    \r\n \"Predvajaj\r\n
    <\/div>\r\n <\/div><\/center>
    \nOstanite z nami in se pridru\u017eite na\u0161emu     YouTube kanalu<\/a><\/noindex> \ud83d\ude42
    \n
    Izvor:     habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

    \u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 8-\u0439 \u0443\u0440\u043e\u043a. \u0423\u0440\u043e\u043a \u043e\u0447\u0435\u043d\u044c \u0432\u0430\u0436\u043d\u044b\u0439, \u0442.\u043a. \u043f\u043e \u0435\u0433\u043e \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0438\u044e \u0432\u044b \u0443\u0436\u0435 \u0441\u043c\u043e\u0436\u0435\u0442\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c \u0432\u044b\u0445\u043e\u0434 \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0434\u043b\u044f \u0432\u0430\u0448\u0438\u0445 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439! \u041d\u0430\u0434\u043e \u043f\u0440\u0438\u0437\u043d\u0430\u0442\u044c, \u0447\u0442\u043e \u043c\u043d\u043e\u0433\u0438\u0435 \u043d\u0430 \u044d\u0442\u043e\u043c \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0443 \u0438 \u0437\u0430\u043a\u0430\u043d\u0447\u0438\u0432\u0430\u044e\u0442 \ud83d\ude42 \u041d\u043e \u043c\u044b \u043d\u0435 \u0438\u0437 \u0438\u0445 \u0447\u0438\u0441\u043b\u0430! \u0418 \u0443 \u043d\u0430\u0441 \u0435\u0449\u0435 \u043c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u0432\u043f\u0435\u0440\u0435\u0434\u0438. \u0410 \u0442\u0435\u043f\u0435\u0440\u044c \u043a \u0442\u0435\u043c\u0435 \u043d\u0430\u0448\u0435\u0433\u043e \u0443\u0440\u043e\u043a\u0430. \u041a\u0430\u043a \u0432\u044b \u0443\u0436\u0435 \u043d\u0430\u0432\u0435\u0440\u043d\u043e […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":23547,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-31629","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd478. Check Point Getting Started R80.20. NAT | ProHoster","description":"Dobrodo\u0161li na 8. lekciji.","canonical_url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sl_SI","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd478. Check Point Getting Started R80.20. NAT | ProHoster","og:description":"\u0414\u043e\u0431\u0440\u043e \u043f\u043e\u0436\u0430\u043b\u043e\u0432\u0430\u0442\u044c \u043d\u0430 8-\u0439 \u0443\u0440\u043e\u043a.","og:url":"https:\/\/prohoster.info\/sl\/blog\/administrirovanie\/8-check-point-getting-started-r80-20-nat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:42:14+00:00","article:modified_time":"2019-10-31T18:42:14+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"31629","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:40:18","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 03:13:29","updated":"2026-02-08 20:40:18","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/31629","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/comments?post=31629"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/31629\/revisions"}],"predecessor-version":[{"id":157992,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/posts\/31629\/revisions\/157992"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media\/23547"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/media?parent=31629"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/categories?post=31629"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sl\/wp-json\/wp\/v2\/tags?post=31629"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}