NAT configuration - Firewall behind the Peplink B-580

[BensonLEI]

Hi Peplink guys,

The following scenarios are not our cases:

How to Configure One-to-One NAT Mappings

NAT Mappings also known as 1-to-1 NAT allows internal hosts, such as web server and mail server etc., behind Peplink Balance to communicate to the Internet via all protocols. With 1-to-1 NAT, you can: For inbound traffic, forwarding all TCP/UDP/IP protocols to the host behind the Peplink units. For outbound traffic, you can specify a Public IP address which you defined as "Additional Public IP" via WAN Settings as the source IP address. The followings are two scenarios of configuring 1-to-1…

Our case, or quite normal cases in commercial:
A firewall behind the Peplink B-580, and Peplink is configured in NAT-mode; how we treat the network segment between Peplink and Firewall ??

Is it LAN segment of Peplink, and WAN/untrust segment of the Firewall ?

The “Inbound Access Policy” of the Peplink should not be configured anything ( leave it default ) ?

For 1-to-1 NAT in Peplink…but this NAT IP (supposed LAN IP ) is treated in WAN IP of the firewall or only any LAN IP of firewall ?

A bit confused, hope you guy understand my meaning, thx a lot.