Re: NAT on router vs. firewall

[Bill_Royds () pch gc ca]

      Bill,

      If I want to limit it to certain source-ip addresses then I translate
     these into a separate pool of internal addresses in a one-for-one
     manner.  (Which is something I do for one system where only one known
     internet address is currently to be allowed through).

      Neil Pike MVP/MCSE
      Protech Computing Ltd





This would work but it seems a bit cumbersome since you would both have to
change router and firewall to change
rules. The original question was reasons for selcting router over firewall
for NAT.

The consensus seems that NAT on routers is probably faster but NAT on
firewall can be more flexible.