NAT

please discribe src-nat and dst-nat

src-nat (Where it is coming from) <–Usually for an outbound request
dst-nat (Where it is going to) <— Usually for an inbound request


Example I want to NAT in all requests to WAN IP 68.X.X.X:8080 to a device behind my router on port 80.
DST-NAT TCP dstport 8080 Action dst-nat IP 10.0.0.8 dst port 80
So the router replaces the WAN IP with the local IP and the dst port with a different dst port.

The classic src-nat example is the generic masquerade rule that changes the source address to the WAN IP.
Local IP 10.0.0.2 request an external resource. 10/8 address can’t route on the internet. So Src-Nat changes the source address to the WAN IP so the request can be replied to.