Next we have lab related to network services like NEC and the HP and others.
Let's get started.
Nag nag we know that it's the aggregate translation you can translate Agassi's from inside to outside
outside to inside or maybe inside private ideas to outside public outside public access to inspect private
practices.
So it's a one type of low level or some sort of security as well that you're hiding some internal detail
when you're going outside.
We have three different type of NAC supported so snack destination act and a reflexive knack.
Now the source and destination that they are actually a state full so they are maintaining their state.
And whenever we are applying the source and destination nag we can see that users can apply that rule
based on five double match criteria.
So we have five triple match criteria when we can apply these rules and destination.
And so it's not simply that your source IP you want to translate to the public IP so you can save or
you can protect your private IP address space by translating through the public IP.
So outside world will think Oh this is something that is public quality so they will not think that
this is private I guess.
So you're hiding the identity plus you are storing some sort of IP as well.
Are you a you are preserving some sort of IP I guess a sentence about whether things are there.
But basically we are using Mac for some sort of security reason that now is in fact true everywhere.
Whenever the internal IP wants to go outside it should be naked translated and then it is going outside.
Then we have the destination.
That is again that means that something is coming from outside one to access inside right which I guess
is at that time.
That's finished and that will happen but this source and destination ACTA keeping track of the systems
that are there actually a grateful.
Now we have the estate last night as well.
That is the reflexive knack we use for a straight laced connection are where we are not tracking the
state of the connection.
They use case for this is the asymmetric part because one part you have some information other party
have some information both the parts are not thinking there is state information so that they can do
the job they can't have track of the estate fullness.
That's the key here.
So in this case it is not tracking the state because it is for asymmetric part or they use cases for
active active ICMP.
So both the devices are active.
So when we are sending the packet other way I am receiving the package so it's very difficult to maintain
this state.
So that's why this is not a strict full census takers.
So you can see the state full source now destination lag can be enable onboard two years zero tier one
gateway a stateless reflexive net can we enable long tier 0 Gateway generally use for active active
we are doing the ECM pivot Oh yeah.
So Alexis stop here and in the next section we have to perform the lab task and will looser certain
configuration related to NAC and then we do the verification as well.
All right.
So we can stop here no.