topic Outbound static, simple question in Network Security

Outbound static, simple question

bsallison — Mon, 11 Mar 2019 14:12:23 GMT

Attached is my 1841 security router config. Simple question. Device 10.2.1.6 is my e-mail server & I want it staticly routed through the 65.103.52.172 address, such that when it sends outbound mail the recipients mail server sees it coming from 65.103.52.172. Right now outbound mail appears to be from 65.103.52.169, so I am missing something in this static route. Please advise.

Re: Outbound static, simple question

Jon Marshall — Wed, 12 Nov 2008 17:45:24 GMT

What is this line doing -

ip nat inside source static 10.2.1.6 65.103.52.172 route-map nonat

more specifically what is the route-map for ?

Jon

Re: Outbound static, simple question

bsallison — Wed, 12 Nov 2008 18:52:13 GMT

Thanks for taking a look Jon!

I also have a VPN coming in through this router and there is some VPN traffic from the remote location that needs access to the 10.2.1.6 server. So, I think the route-map was added because of that VPN so that traffic over the VPN does not get NATed going back to the remote location.

Re: Outbound static, simple question

Jon Marshall — Wed, 12 Nov 2008 20:05:48 GMT

I suspect this line in your config

ip nat inside source route-map nonat interface FastEthernet0/1 overload

is taking precedence over this one

ip nat inside source static tcp 10.2.1.6 25 65.103.52.172 25 extendable

Please do this out of production hours and verify that your VPN traffic still works.

Jon

not sure you need the second route-map statement as you are covered in the first one.

try changing -

ip nat inside source static 10.2.1.6 65.103.52.172 route-map nonat

Re: Outbound static, simple question

bsallison — Wed, 12 Nov 2008 20:10:01 GMT

try changing -

ip nat inside source static 10.2.1.6 65.103.52.172 route-map nonat

These lines you provided are exactly the same, what am I changing?

Re: Outbound static, simple question

Jon Marshall — Wed, 12 Nov 2008 20:26:47 GMT

Sorry about that, sometimes i'm a bit absent minded 🙂

ip nat inside source static 10.2.1.6 65.103.52.172 route-map nonat

ip nat inside source static 10.2.1.6 65.103.52.172