ISR4000路由器上的ip nat outside source list问题

[leimin fan]

本帖最后由 fanleimin 于 2018-11-1 22:03 编辑
有没有人遇到过这样的需求呢 ？ISR4000路由器
https://community.cisco.com/t5/routing/outside-nat/m-p/2701002#M252263
outside NAT

Hi, I have a question on NAT. I have to do outside NAT on the WAN interface of my router to be able to connect from outside on internal servers.

So for example, my outside IP address is 200.100.10.1. If someone connects to this IP address using port 8000 I would like the destination to be Natted to 10.10.10.1 port 80. If some connects to 200.100.10.1 on port 8001 I would like destination to be natted to 10.10.10.2 port 22.

Is this doable on Cisco router (cat 6500 IOS 12.2(33)SXJ7)?

Any suggestiosn on how to achieve this, if not router then ASA?

该案例与另一个案例也很相似https://community.cisco.com/t5/routing/outside-nat-for-specific-flow-only/td-p/3360285

[cisco.feng · Accepted solution]

fanleimin 发表于 2018-11-4 15:15
感谢回复， 我就是想在ISR上做和防火墙类似的twice nat， 同时转换目的地址和源地址。

类似这个环境么
http://www.routereflector.com/2017/02/twice-double-nat-on-cisco-router/

[Terence.Jh]

I have already posted a detailed description about this issue, you can implement it with policy-based NAT
This is not a complicated problem

[Terence.Jh]

http://bbs.csc-china.com.cn/forum.php?mod=viewthread&tid=987984

[leimin fan]

terence 发表于 2018-11-2 09:35
http://bbs.csc-china.com.cn/forum.php?mod=viewthread&tid=987984

感谢回复， 我就是想在ISR上做和防火墙类似的twice nat， 同时转换目的地址和源地址。

[leimin fan]

terence 发表于 2018-11-2 09:35
http://bbs.csc-china.com.cn/forum.php?mod=viewthread&tid=987984

感谢回复， 我就是想在ISR上做和防火墙类似的twice nat， 同时转换目的地址和源地址。

[cisco.feng]

类似这个环境么
http://www.routereflector.com/2017/02/twice-double-nat-on-cisco-router/

[leimin fan]

cisco.feng 发表于 2018-11-6 02:02
类似这个环境么
http://www.routereflector.com/2017/02/twice-double-nat-on-cisco-router/

对的, 和这个案例比较相似, 现在问题已经解决了,感谢!

[leimin fan]

cisco.feng 发表于 2018-11-6 02:02
类似这个环境么
http://www.routereflector.com/2017/02/twice-double-nat-on-cisco-router/

对的, 和这个案例比较相似, 现在问题已经解决了,感谢!