{"id":55648,"date":"2020-01-25T00:00:00","date_gmt":"2020-01-24T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/5-fortinet-getting-started-v6-0-nat"},"modified":"2020-02-18T14:03:47","modified_gmt":"2020-02-18T11:03:47","slug":"5-fortinet-getting-started-v6-0-nat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/5-fortinet-getting-started-v6-0-nat","title":{"rendered":"5. Fortinet Getting Started v6.0. NAT","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\"5.
\n
\nP\u00ebrsh\u00ebndetje! Mir\u00eb se vini n\u00eb leksionin e pest\u00eb t\u00eb kursit Fortinet Fillimi<\/a><\/noindex>. N\u00eb m\u00ebsimin e kaluar<\/a><\/noindex> ne kemi analizuar pun\u00ebn e politikave t\u00eb sigurimeve. Tani ka ardhur koha t\u00eb lirohen p\u00ebrdoruesit lokal\u00eb n\u00eb Internet. P\u00ebr k\u00ebt\u00eb, n\u00eb k\u00ebt\u00eb leksion do t\u00eb shqyrtojm\u00eb funksionimin e mekanizmit NAT.
\nP\u00ebrve\u00e7 lirimit t\u00eb p\u00ebrdoruesve n\u00eb Internet, ne gjithashtu do t\u00eb shqyrtojm\u00eb metod\u00ebn e publikimit t\u00eb sh\u00ebrbimeve t\u00eb brendshme. N\u00ebn k\u00ebt\u00eb kategori do t\u00eb paraqitet nj\u00eb teori e shkurt\u00ebr nga videoja, si dhe video leksioni vet\u00eb. <\/a><\/noindex>
\nTeknologjia NAT (Translatione e Adresave t\u00eb Rrjetit) paraqet nj\u00eb mekaniz\u00ebm t\u00eb transformimit t\u00eb adresave IP t\u00eb paketave rrjetike. N\u00eb terma t\u00eb Fortinet NAT ndahet n\u00eb dy lloje: Source NAT dhe Destination NAT. <\/p>\n

Emrat flasin vet\u00eb p\u00ebr veten \u2014 kur p\u00ebrdoret Source NAT, adresa e burimit ndryshohet, kur p\u00ebrdoret Destination NAT \u2014 adresa e destinacionit. <\/p>\n

P\u00ebrve\u00e7 k\u00ebsaj, ka disa mund\u00ebsi p\u00ebr konfigurimin e NAT-it \u2014 Firewall Policy NAT dhe Central NAT.<\/p>\n

\"5.
\n
\nKur p\u00ebrdoret varianti i par\u00eb, Source dhe Destination NAT duhet t\u00eb konfigurohen p\u00ebr secil\u00ebn politik\u00eb sigurie. N\u00eb nj\u00eb rast t\u00eb till\u00eb, Source NAT p\u00ebrdor ose adres\u00ebn IP t\u00eb interfaces s\u00eb daljes, ose nj\u00eb IP Pool t\u00eb parakonfiguruar. Destination NAT p\u00ebrdor nj\u00eb objekt t\u00eb parakonfiguruar (n\u00eb k\u00ebt\u00eb rast VIP \u2014 IP Virtual) si adres\u00eb destinacioni.<\/p>\n

Kur p\u00ebrdoret Central NAT, konfigurimi i Source dhe Destination NAT b\u00ebhet menj\u00ebher\u00eb p\u00ebr t\u00eb gjith\u00eb pajisjen (apo domenin virtual). N\u00eb k\u00ebt\u00eb rast, parametrat NAT p\u00ebrdoren p\u00ebr t\u00eb gjitha politikat, n\u00eb var\u00ebsi t\u00eb rregullave t\u00eb Source NAT dhe Destination NAT. <\/p>\n

Rregullat e Source NAT konfigurohen n\u00eb politik\u00ebn qendrore t\u00eb Source NAT. Destination NAT konfigurohet nga menuja DNAT duke p\u00ebrdorur adresat IP. <\/p>\n

N\u00eb k\u00ebt\u00eb leksion ne do t\u00eb shqyrtojm\u00eb vet\u00ebm Firewall Policy NAT \u2014 si\u00e7 tregon praktika, ky variant i konfigurimit haset shum\u00eb m\u00eb shpesh se Central NAT. <\/p>\n

Si\u00e7 e kam p\u00ebrmendur, kur konfigurohet Firewall Policy Source NAT ka dy mund\u00ebsi p\u00ebr konfigurim: z\u00ebvend\u00ebsimi i adres\u00ebs IP me adres\u00ebn e interfaces s\u00eb daljes, ose me adres\u00ebn IP nga nj\u00eb pool t\u00eb parakonfiguruar. Kjo duket m\u00eb pak si\u00e7 \u00ebsht\u00eb treguar n\u00eb figur\u00ebn m\u00eb posht\u00eb. M\u00eb pas do t\u00eb flas shkurt p\u00ebr mund\u00ebsit\u00eb e pool-eve, por n\u00eb praktik\u00eb ne do t\u00eb shqyrtojm\u00eb vet\u00ebm variantin me adres\u00ebn e interfaces s\u00eb daljes \u2014 n\u00eb modelin ton\u00eb, pool-et e adresave IP nuk na nevojiten. <\/p>\n

\"5.
\n
\nPool-i i IP-s\u00eb p\u00ebrcakton nj\u00eb ose disa adresa IP q\u00eb do t\u00eb p\u00ebrdoren si adresa e burimit gjat\u00eb seanc\u00ebs. K\u00ebto adresa IP do t\u00eb p\u00ebrdoren n\u00eb vend t\u00eb adres\u00ebs IP t\u00eb interfaces s\u00eb daljes FortiGate. <\/p>\n

Ekzistojn\u00eb 4 lloje IP shfryt\u00ebzuesish q\u00eb mund t\u00eb konfigurohen n\u00eb FortiGate:<\/p>\n