RE: NATing both source and destination

From: Ken.Farrington@barclayscapital.com
Date: Thu Nov 27 2003 - 13:22:45 GMT-3


yes this is quite common.

!
interface Ethernet0/0
 description Connection to cust1 LAN
 ip nat outside
!
interface Serial0/0
 description Connection to Our LAN
 ip nat inside
!
!
ip nat pool cust1-outside 11.2.3.0 11.2.3.63 netmask 255.255.255.192
ip nat inside source static 160.13.145.30 192.168.99.2
ip nat outside source list cust1-permit-list pool cust1-outside
!
ip access-list extended mps-permit-list
 permit ip 155.195.0.0 0.0.255.255 any
 deny ip any any
!

cust1-router#sh ip nat tran
Pro Inside global Inside local Outside local Outside global
--- 192.168.99.2 160.13.145.30 11.2.3.7 155.195.158.203
--- 192.168.99.2 160.13.145.30 11.2.3.5 155.195.158.204
--- 192.168.99.2 160.13.145.30 11.2.3.2 155.195.159.115
--- 192.168.99.2 160.13.145.30 11.2.3.6 155.195.159.161
                                        
       

-----Original Message-----
From: Ram Shummoogum [mailto:rshummoo@ca.ibm.com]
Sent: 27 November 2003 14:33
To: ccielab@groupstudy.com
Subject: NATing both source and destination

On a firewall it is possible to nat both the source address and destination
at the same time using alias.

Is it possible to do the same on a single router without the firewall IOS?

Thanks,
RAM



This archive was generated by hypermail 2.1.4 : Fri Dec 12 2003 - 12:29:18 GMT-3