Sangfor_NGAF Learning Notes 5

1. Address translation

Source address translation: when a private network address accesses a public network address, the private network IP address that initiated the access is translated into a public network address. Multiple hosts in the private network can access the public network through one public network address.

Typical application scenario: the device is deployed at the exit, and the intranet users surf the Internet by proxy (LAN-WAN)

1.2 destination address translation: destination address translation is also known as reverse address translation or address mapping. destination address translation is an one-way address translation for destination addresses, which is mainly used by internal servers to provide services to external network users with public network addresses.

Typical application scenario: external network users can directly access the internal server (WAN-LAN) by directly accessing the public network address of the line where the server is located.

1.3 two-way address translation: the translation of both source and destination addresses is included in a translation rule.

Typical application scenario: private network users access private network server (LAN-LAN) through public network address