Re: NAT for destination address

From: Wu Jiang (wujiang@xxxxxxxxx)
Date: Wed Feb 21 2001 - 05:55:17 GMT-3


   
Not permitted? Then IPSec?

----- Original Message -----
From: "Liu Jianxin-qch1927" <Jianxin.Liu@motorola.com>
To: "'Wu Jiang'" <wujiang@bj163.com>
Cc: <ccielab@groupstudy.com>
Sent: Wednesday, February 21, 2001 4:47 PM
Subject: RE: NAT for destination address

> Yes, GRE can do this, but not permitted on this senario.
>
> Thanks,
> jianxin
>
> -----Original Message-----
> From: Wu Jiang [mailto:wujiang@bj163.com]
> Sent: Wednesday, February 21, 2001 4:42 PM
> To: Liu Jianxin-qch1927
> Cc: ccielab@groupstudy.com
> Subject: Re: NAT for destination address
>
>
> How about set up a tunnel over internet?
>
> ----- Original Message -----
> From: "Liu Jianxin-qch1927" <Jianxin.Liu@motorola.com>
> To: <ccielab@groupstudy.com>
> Sent: Wednesday, February 21, 2001 4:11 PM
> Subject: NAT for destination address
>
>
> > Group,
> >
> > The senario:
> > PC ----- NAT (router or PIX) ------Router --------Internet ---------------
---------------Internet ------PIX ----- Server
> > 10.1.1.1

       10.2.2.2 (168.1.1.1)
> >
> > the client pc use a private ip address, the server on Internet use public I
nterent address,
> > But the client HAS TO (the requirement in this senario) use 10.2.2.2 to acc
ess the server,
> > that's mean the packet from the pc like this:
> > source ip: 10.1.1.1
> > dest ip : 10.2.2.2
> > But we must change it to : source 202.2.2.2 (a pool in NAT), dest ip 168.1
.1.1.
> >
> >
> > The PIX on the server side has one static map for the server already(10.2.2
.2 to 168.1.1.1),
> > So what should we do to configure the NAT on the PC side?
> >
> > Any help?
> >
> > Thanks,
> >
> > Jianxin Liu
> > Invisix - Motorola and Cisco Together
> > e-mail: Jianxin.Liu@motorola.com
> > Web: http://www.invisix.com
> >



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:28:55 GMT-3