Your main internal network 10.10.10.0/24 allows all traffic to the Internet using Hide NAT. You also have a small network 10.10.20.0/24 behind the internal router. You want to configure the kernel to translate the source address only when network 10.10.20.0 tries to access the Internet for HTTP, SMTP, and FTP services. Which of the following configurations will allow this network to access the Internet?
A.
Configure three Manual Static NAT rules for network 10.10.20.0/24, one for each service
B.
Configure one Manual Hide NAT rule for HTTP, FTP, and SMTP services for network 10.10.20.0/24
C.
Configure Automatic Hide NAT on network 10.10.20.0/24 and then edit the Service column in the NAT Rule Base on the automatic rule
D.
Configure Automatic Static NAT on network 10.10.20.0/24
I have been playing with the GUI and I do not see where it is possible to add 3 services in one manual static rule. Does anyone know how the ans C could actually work ?
Otherwise I would have to go with A
I agree with the answer. B
But how can we add 3 services to one manual static rule?
you can only have a individual object in the service column in NAT rules, but you can create a group object containing all the services needing to be included, then use the group object.