topic Re: Destination NAT in Network Security

Destination NAT

wostrobel — Mon, 11 Mar 2019 11:40:08 GMT

Ive got some Client on the Inside Network which should connect to a Server on the Outside Network through a PIX 501. Now I want to translate the Destination Address fom the Inside to the Ouside. Anybody an idea how to do that? Thanks

Re: Destination NAT

acomiskey — Thu, 06 Dec 2007 20:09:56 GMT

x.x.x.x = translated ip

y.y.y.y = real ip

static (outside,inside) x.x.x.x y.y.y.y netmask 255.255.255.255

Re: Destination NAT

wostrobel — Thu, 06 Dec 2007 20:14:37 GMT

Is this really changing the destination IP, or just the source IP. Are there multiple connection possible?

Re: Destination NAT

acomiskey — Thu, 06 Dec 2007 20:20:18 GMT

That would change the destination address, not the source. For example if the inside client requested 1.1.1.1 it would be translated to 2.2.2.2.

static (outside,inside) 1.1.1.1 2.2.2.2 netmask 255.255.255.255

Re: Destination NAT

wostrobel — Thu, 06 Dec 2007 20:24:28 GMT

OK, thats what I have tried. Maybe there is an routing issue on the Outside network.

Re: Destination NAT

wostrobel — Thu, 06 Dec 2007 20:59:26 GMT

Clients 10.42.2.25 to Server 192.168.249.25

The output says translating inside source to outside destination, and untranslating inside destination to outside destination!

850: ICMP echo-request: translating inside:10.144.4.1/1832 to outside:192.168.249.25/10

851: ICMP echo-request: untranslating inside:10.42.2.25 to outside:192.168.249.25