NAT related question

Hello, Group

I have a nat related question.

For example, I configured the following static nat in a firewall.

static(outside, inside) 1.1.1.1 2.2.2.2

This statement means real ip 2.2.2.2 from outside will be translated to
1.1.1.1 inside.

In terms of the real ip before translated, is there any restriction?
Someone told me that pre-translated addresses much be in one of the
firewall segment, but I think this option is not mandatory.
I tested in virtual environment, static nat worked fine even if a
pre-translated address wasn't in one of the firewall segment.

If I'm not right, could anyone advise me?

Thanks in advance,

Regards,
Myung-Soo

Blogs and organic groups at http://www.ccie.net
Received on Wed Apr 04 2012 - 12:46:25 ART