topic hello Philip in Network Security

nat question

zhushaogang — Tue, 12 Mar 2019 07:27:52 GMT

Hello，Everyone

I have a question, I hope to get help, As shown in Figure requirements, how to achieve？thank you!

So if the client accesses a 9

Philip D'Ath — Thu, 10 Mar 2016 09:20:33 GMT

So if the client accesses a 9.0.0.0/8 address you want there source addresses NATed to 2.0.0.0/8.

And is 9.0.0.0/8 being NATed into the 200.0.0/24, 201.0.0/24, etc server addresses?

hello Philip

zhushaogang — Thu, 10 Mar 2016 10:05:20 GMT

hello Philip

Thank you for your answer, your description is right, and the client is through the DNS analysis to get the server address, the client only know 9.0.0.0/8 this paragraph of routing, there is a solution to it?

Yes, but it is painful.

Philip D'Ath — Fri, 11 Mar 2016 01:55:16 GMT

Yes, but it is painful. Check out this guide.,

http://www.cisco.com/c/en/us/td/docs/security/asa/asa84/asdm64/configuration_guide/asdm_64_config/nat_rules.html

OK,Philip D'Ath,thank you

zhushaogang — Fri, 11 Mar 2016 07:00:11 GMT

OK,Philip D'Ath,thank you very much

Hi,Philip ,the Add NAT Rule

zhushaogang — Wed, 16 Mar 2016 11:24:15 GMT

Hi,Philip ,the Add NAT Rule dialog box,check the 'Translate DNS replies that match this rule' check box,through 8.8.8.8 analysis, DNS A records rewritten as 9.0.0.0/24,yes or not? if not ,how to get? thank you.

but ,Its explanation is that，(For a source-only rule) Translate DNS replies that match this rule

You know, I have never used

Philip D'Ath — Wed, 16 Mar 2016 21:14:24 GMT

You know, I have never used that option, so I'm not sure if it will accomplish what you want or not.