Stop acting like a NAT is going to save you. Protip: it isn't.
You need proper firewalls, NAT, and physical network design. It's an entire security package, you don't just slap NAT on it and call it done.
You need proper firewalls, NAT, and physical network design. It's an entire security package, you don't just slap NAT on it and call it done.
Firewalls may not even have NAT functionality. They are used to figure decide if packet coming from interface with some flags (source, destination, ip, protocol, port, tcp flags etc.) is allowed to be passed to another interface. These days virtually all routers have at least basic firewall support & firewalls have at least basic NAT support.