RE: NAT Scenario

From: Voss, David (dvoss@xxxxxxxxxxxx)
Date: Mon Aug 26 2002 - 18:51:27 GMT-3


   
So, if I use subinterfaces, I still have one remaining issue... redirecting
a requested address to an address on my own subnet. Has anyone done this?

interface ethernet 0/1.1
 ip address 172.16.10.1 255.255.255.0
 ip nat inside

interface ethernet 0/1.11
 ip address 200.200.200.5 255.255.255.252
 ip nat outside

THE GOAL

ip nat inside source static tcp 172.16.10.8 8080 200.200.200.8 80
!-- Static NAT command that states any packet received in the inside
!-- interface with a source address of 172.16.10.8:8080 will be
!-- translated to 200.200.200.8:80.

-----Original Message-----
From: Voss, David
Sent: Monday, August 26, 2002 4:25 PM
To: Voss, David; ccielab@groupstudy.com
Subject: RE: NAT Scenario

I should state my question better which actually adds more complexity......

What if you were trying to redirect BACK to the subnet from the person is
coming from.

For example:

I am user 172.20.20.25/24 when I ping 172.20.50.25/24, I should be
redirected to 172.20.20.30/24 so that it answers the ping.

-----Original Message-----
From: Voss, David
Sent: Monday, August 26, 2002 3:40 PM
To: ccielab@groupstudy.com
Subject: NAT Scenario

Here is a NAT Scenario that I cannot find a solution for, but I believe
there must be one:

The Goal: Traffic destined for an IP address must be redirected to a
different one.
Example: Client pings 172.20.20.25, this traffic is redirected to
172.20.50.25 without the user knowing, and a reply is returned.

The Problem: What if your router is running the client (inside) subnet on
the same interface as the server (outside) interface?

interface FastEthernet0/1
 ip address 172.20.20.20 255.255.255.0 secondary
 ip address 172.20.50.20 255.255.255.0
 no ip directed-broadcast
 no keepalive
 full-duplex
end

How do you apply ip nat (inside/outside)?

ip nat inside (where?)
ip nat outside (where?)
ip nat inside source 172.20.50.25 172.20.20.25



This archive was generated by hypermail 2.1.4 : Sat Sep 07 2002 - 19:48:38 GMT-3