Configuring NAT in Hot Standby Scenario

Binding NAT Address Pools to VRRP Groups

In active/standby mode, you do not need to manually bind the NAT address pool to the VRRP group. In load balancing hot standby, if addresses in a NAT address pool are not on the same subnet as the address of a VRRP group, you do not need to manually bind the NAT address pool to the VRRP group. If addresses in a NAT address pool are on the same subnet as the address of a VRRP group, you need to manually bind the NAT address pool to the VRRP group.

Binding NAT Server to VRRP

In active/standby mode, you do not need to manually bind the NAT Server to the VRRP group. In load balancing hot standby, if the public IP address of NAT Server and the IP address of the VRRP group are not on the same network segment, you do not need to manually bind the NAT address pool to the VRRP group. If the public IP address of NAT Server and the IP address of the VRRP group are on the same network segment, you need to manually bind the NAT Server to the VRRP group.

Web: Example for Configuring Source NAT in Load Balancing Scenarios (Active and Standby FWs Using the Same Address Pool)

CLI: Example for Configuring Source NAT in a Load Balancing Scenario (Active and Standby Devices Share One Address Pool)

CLI: Example for Configuring Source NAT in a Load Balancing Scenario (Active and Standby Devices Use Different Address Pools)