topic Router Natting in Network Security

Router Natting

estelamathew — Mon, 11 Mar 2019 22:13:36 GMT

Hello,

I have only 1 public IP on my router outside interface which is connected to ISP,

I wanna just confirm the below from u experts,

I want to create a site -to site VPN with other branches i have a proper IOS ------- I hope i can do it
The public IP on router outside interface,, can i use the same IP for static natting of web server (one to one) ????? If suppose i use in static natting and if i ping from internet to the public IP it will ping to router interface or it will ping to server IP ????-------- I hope we can't do it.
IF i m not wrong then,, i hope i can use service distrbution with that same public IP but not static natting (one to one).
i hope there is no concept of firewall that if we do natting we need a access-list, On router without an access-list also users from internet can access the inside servers only natting should be provided.

Router Natting

Julio Carvajal — Fri, 13 Jan 2012 04:27:43 GMT

Hello Estela,

1- Yes you can configure a VPN site to site as long as the router supports it

2-You cannot do a static one to one with the outside interface of the asa that will be used for other host to go to the internet., instead of that you can configure port-forwarding that will work for inbound connections ( Just TCP and UDP as these protocols use ports)

3-Yes, you can do it as I explained on previus answer

4-That is correct, without ACL everything is allowed.

Regards,

Julio

Rate helpful posts!

Router Natting

estelamathew — Fri, 13 Jan 2012 10:10:56 GMT

Hello julio

Some more question please:

The link on router is ADSL but it always receive the fixed IP from the ISP when the router reboots,It has been agreed by the ISP. so i don' think it should be any issues for VPN and static natting ( service distribution)
It is a router and not a firewall so the terminology of service distribution on router is same as port forwarding in ASA.

Router Natting

cadet alain — Fri, 13 Jan 2012 14:01:26 GMT

Hi,

1) no

2) yes but implementation is different.

Regards.

Alain

Router Natting

estelamathew — Fri, 13 Jan 2012 19:00:45 GMT

Hi,

"No" means there will be no issues ???

Router Natting

cadet alain — Fri, 13 Jan 2012 20:40:04 GMT

Hi,

if the IP is static there will be no problem for VPN otherwise it's best to use Dyndns but for NAT it's not a problem.

Regards.

Alain.

Router Natting

estelamathew — Sat, 14 Jan 2012 04:53:16 GMT

Hello,

The IP is not static but the IP is bind to our router inteface MAC address by the ISP, so that when a router reboots the interface will get the same IP. Will there be a problem for vpn and Nat.

Router Natting

Julio Carvajal — Sat, 14 Jan 2012 06:02:44 GMT

Hello Estela,

Not at all as the ip address will be always be the same ( Assigned for the ISP regarding your MAC address)

Regards,

Julio

Do rate helpful posts

Router Natting

estelamathew — Sat, 14 Jan 2012 06:11:14 GMT

Thanks dear

Router Natting

Julio Carvajal — Sat, 14 Jan 2012 06:44:34 GMT

Hello Estela,

My pleasure, Glad I could help.

Julio