Re: NAT - Use an ACL and match on source IP/port#

I think it makes sense to me now anyway. When the first packet hits the
outside, its at that point in time that the xlation should occur - not when
the return traffic comes back!

Thanks anyway!

Sadiq

On Sat, May 8, 2010 at 8:11 PM, Sadiq Yakasai <sadiqtanko_at_gmail.com> wrote:

> All,
>
> So, I have been trying to configure some IOS NAT. Is it possible to
> configure a static NAT while referencing the source IP/port#? Tried a couple
> of times and it didnt. So I reversed the nat && ACL and it worked.
>
> This didnt work:
> ip nat inside source list NAT_ACL pool NAT_POOL _-> this complained about
> the nat pool being of type "rotary".
> R3#sh ip access
> R3#sh ip access-lists
> Extended IP access list NAT_ACL
> 5 permit tcp host 132.1.2.100 range 3000 3500 any
>
>
> This worked:
> ip nat inside destination list NAT_ACL pool NAT_POOL
> R3#sh ip access
> R3#sh ip access-lists
> Extended IP access list NAT_ACL
> 5 permit tcp any host 132.1.2.100 range 3000 3500
>
> Anyone knows what the deal is here please?
>
> Thanks as usual!
>
> --
> CCIE #19963
>

-- 
CCIE #19963
Blogs and organic groups at http://www.ccie.net