NAT - Use an ACL and match on source IP/port#

From: Sadiq Yakasai <sadiqtanko_at_gmail.com>
Date: Sat, 8 May 2010 20:11:49 +0100

All,

So, I have been trying to configure some IOS NAT. Is it possible to
configure a static NAT while referencing the source IP/port#? Tried a couple
of times and it didnt. So I reversed the nat && ACL and it worked.

This didnt work:
ip nat inside source list NAT_ACL pool NAT_POOL _-> this complained about
the nat pool being of type "rotary".
R3#sh ip access
R3#sh ip access-lists
Extended IP access list NAT_ACL
    5 permit tcp host 132.1.2.100 range 3000 3500 any

This worked:
ip nat inside destination list NAT_ACL pool NAT_POOL
R3#sh ip access
R3#sh ip access-lists
Extended IP access list NAT_ACL
    5 permit tcp any host 132.1.2.100 range 3000 3500

Anyone knows what the deal is here please?

Thanks as usual!

-- 
CCIE #19963
Blogs and organic groups at http://www.ccie.net
Received on Sat May 08 2010 - 20:11:49 ART

This archive was generated by hypermail 2.2.0 : Tue Jun 01 2010 - 07:09:52 ART