From: NITIN NITIN (ccie_study_123@yahoo.com)
Date: Sat Aug 18 2007 - 03:02:42 ART
Hi,
Can this be a valid solution , m weak in NAT .......
If not please guide the right one
CUSTOMER ip 1.1.1.1/24
> if the customer is targeting 10.10.10.1, translate the customer's source
> IP
> to 172.16.50.1
> if the customer is targeting 10.10.10.2, translate the customer's source
> IP
> to 172.16.50.2
ip nat inside source list 101 POOL ip-1
access-list 101 permit host 1.1.1.1 10.10.10.1 0.0.0.0 <<<<<matching traffic
pool ip-1 permit 172.16.50.1 172.16.50.1 /24
and on interface cutomer is connected mark as ip nat inside
Regards
Herbert Maosa <asawilunda@googlemail.com> wrote:
You can NAT the customer's source address if the traffic is going from an
interface marked as outside to an interface marked as inside. The virtual
address that you NAT this address into must be routable in your inside
network, and must not be in the same subnet as an inside interface.
Herbert.
On 8/17/07, Jersey Guy wrote:
>
> Folks, Just looking for some pointers on whether this can be done or
> not....
>
> Customer connects to my router on FA0/1. He presents himself as a single
> IP
> address which I need to NAT on my side before sending it on to the core
> where the applications reside. Can I NAT the customer's source IP address
> to
> different addresses depending on the target IP address?
>
> That is....
> if the customer is targeting 10.10.10.1, translate the customer's source
> IP
> to 172.16.50.1
> if the customer is targeting 10.10.10.2, translate the customer's source
> IP
> to 172.16.50.2
>
> TIA, JG
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
-- Kindest regards, hm
This archive was generated by hypermail 2.1.4 : Sat Sep 01 2007 - 11:32:11 ART