{"id":55648,"date":"2020-01-25T00:00:00","date_gmt":"2020-01-24T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/5-fortinet-getting-started-v6-0-nat"},"modified":"2020-02-18T14:03:47","modified_gmt":"2020-02-18T11:03:47","slug":"5-fortinet-getting-started-v6-0-nat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-fortinet-getting-started-v6-0-nat","title":{"rendered":"5. Fortinet Getting Started v6.0. NAT","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"5.
\n
\nP\u00ebrsh\u00ebndetje! Mir\u00eb se vini n\u00eb m\u00ebsimin e pest\u00eb t\u00eb kursit Fortinet Getting Started<\/a><\/noindex>. N\u00eb m\u00ebsimi i kaluar<\/a><\/noindex> ne u diskutuan politikat e siguris\u00eb. Tani \u00ebsht\u00eb koha p\u00ebr t\u00eb lejuar p\u00ebrdoruesit lokal\u00eb n\u00eb Internet. N\u00eb k\u00ebt\u00eb m\u00ebsim do t\u00eb shqyrtojm\u00eb funksionimin e mekanizmit NAT.
\nP\u00ebrve\u00e7 lejes s\u00eb p\u00ebrdoruesve n\u00eb Internet, ne gjithashtu do t\u00eb shqyrtojm\u00eb metod\u00ebn e publikimit t\u00eb sh\u00ebrbimeve t\u00eb brendshme. Posht\u00eb \u00ebsht\u00eb nj\u00eb teori e shkurt\u00ebr nga videoja, si dhe vet\u00eb m\u00ebsimi video. <\/a><\/noindex>
\nTeknologjia NAT (Network Address Translation) \u00ebsht\u00eb nj\u00eb mekaniz\u00ebm i p\u00ebrkthimit t\u00eb adresave IP n\u00eb paketat rrjet. N\u00eb terma t\u00eb Fortinet, NAT ndahen n\u00eb dy lloje: Source NAT dhe Destination NAT. <\/p>\n

Emrat flasin vet\u00eb \u2014 duke p\u00ebrdorur Source NAT, adresa e burimit ndryshohet, nd\u00ebrsa me Destination NAT, adresa e destinacionit ndryshohet. <\/p>\n

P\u00ebrve\u00e7 k\u00ebsaj, ka disa mund\u00ebsi p\u00ebr konfiguruar NAT \u2014 Firewall Policy NAT dhe Central NAT.<\/p>\n

\"5.
\n
\nKur p\u00ebrdoret opsioni i par\u00eb, Source dhe Destination NAT duhet t\u00eb konfigurohen p\u00ebr \u00e7do politik\u00eb sigurie. N\u00eb k\u00ebt\u00eb rast, Source NAT p\u00ebrdor ose adres\u00ebn IP t\u00eb nd\u00ebrfaqes dal\u00ebse, ose nj\u00eb IP Pool t\u00eb paracaktuar. Destination NAT p\u00ebrdor nj\u00eb objekt t\u00eb paracaktuar (i quajtur VIP \u2014 Virtual IP) si adres\u00eb destinacioni.<\/p>\n

Kur p\u00ebrdoret Central NAT, konfigurimi i Source dhe Destination NAT b\u00ebhet nj\u00ebher\u00ebsh p\u00ebr t\u00eb gjith\u00eb pajisjen (ose domenin virtual). N\u00eb k\u00ebt\u00eb rast, parametrat NAT aplikohen p\u00ebr t\u00eb gjitha politikat, n\u00eb var\u00ebsi t\u00eb rregullave t\u00eb Source NAT dhe Destination NAT. <\/p>\n

Rregullat e Source NAT konfigurohen n\u00eb politik\u00ebn qendrore t\u00eb Source NAT. Destination NAT konfigurishohet nga menuja DNAT duke p\u00ebrdorur adresat IP. <\/p>\n

N\u00eb k\u00ebt\u00eb m\u00ebsim, ne do t\u00eb shqyrtojm\u00eb vet\u00ebm Firewall Policy NAT \u2014 si\u00e7 tregon praktika, ky opsion konfigurimi njihet shum\u00eb m\u00eb shpesh se Central NAT. <\/p>\n

Si e thash\u00eb, gjat\u00eb konfigurimit t\u00eb Firewall Policy Source NAT ka dy mund\u00ebsi: z\u00ebvend\u00ebsimi i adres\u00ebs IP me adres\u00ebn e nd\u00ebrfaqes s\u00eb daljes, ose me nj\u00eb adres\u00eb IP nga nj\u00eb grup i paracaktuar adresash IP. Kjo duket m\u00eb pak si\u00e7 tregohet n\u00eb figur\u00ebn m\u00eb posht\u00eb. M\u00eb pas do t\u00eb flas shkurtimisht p\u00ebr grupet e mundshme, por n\u00eb praktik\u00eb do t\u00eb shqyrtojm\u00eb vet\u00ebm opsionin me adres\u00ebn e nd\u00ebrfaqes s\u00eb daljes \u2014 n\u00eb modelin ton\u00eb grupet e adresave IP nuk na nevojiten. <\/p>\n

\"5.
\n
\nGrupi IP p\u00ebrcakton nj\u00eb ose m\u00eb shum\u00eb adresa IP q\u00eb do t\u00eb p\u00ebrdoren si adres\u00eb burimi gjat\u00eb sesionit. K\u00ebto adresa IP do t\u00eb p\u00ebrdoren n\u00eb vend t\u00eb adres\u00ebs IP t\u00eb nd\u00ebrfaqes s\u00eb daljes FortiGate. <\/p>\n

Ekzistojn\u00eb 4 lloje grupesh IP q\u00eb mund t\u00eb konfigurohen n\u00eb FortiGate:<\/p>\n