What is the difference between NAT filter-mode vs NAT mapping-mode?
filtering allows an NAT device to filter the traffic from a public
network to a private network.
mapping enables the IP addresses of group of hosts on a private network to
be mapped to the same public IP address using the NAT table.
the NAT filtering mode is set to endpoint-independent: nat filter-mode endpoint-independent, the
system uses: “destination IP address +destination port number + protocol
number” to search the mapping table. If a corresponding entry is found, the
system generates a reverse mapping entry. The destination address and port in
the entry are the IP address and port number on the internal network.
When you enable NAT mapping on a public
network, all the hosts from the private network share the same public IP
If NAT mapping mode is set to
endpoing-independent: nat mapping-mode endpoint-independent, the
NAT uses the same IP address and port mapping for packets sent from the same
private IP address and port to any public IP address and port.