cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
636
Views
0
Helpful
1
Replies

NAT multiple IP to fix IP inside a VLAN

Tacko
Level 1
Level 1

Hi.

Is there a possibility to translate/NAT/Forward a VLAN IP to the corresponding IP in another VLAN changing the prefix?

I want to ping from 192.168.10.2 to 192.168.20.2, but the PC is inside the VLAN with IP 10.168.20.2

 

Regardsimage.png

1 Reply 1

Hi, 

 

   So what I have understood from your diagram is that you have got two switches directly connected to your firewall at each end and there is another switch connected to 192.168.20.0/24 switch with the network of 10.168.20.0. 

 

If my understanding is correct then I am not sure what are you looking to achieve here. If you are just looking to forward an IP packet from your host 192.168.10.2 to 10.168.20.2 and route the traffic through the firewall it can be done. on the left side you can configure the IP 192.168.10.1 on interface of the firewall as a default gateway to the host 192.168.10.2, The firewall should be in layer three routed mode. Similarly on the right side you can achieve that in couple of ways, if you are using layer 2 switches then you can configure the Link between those two switches as a trunk link and allow desirable VLANS on the Link and same way configure the link between your 192.168.20.0 switch and Firewall as a trunk link. Create two subinterfaces on your firewall with the DOT1Q Tags enabled and give them IP addresses ie 192.168.20.1 and 10.168.20.1 and on your access switch configure the host port in same VLAN and it should work. 

 

There are couple of other ways if you are reffering these boxes as vlans not switches then you need to have some routing between those subnets and you have to give more details. 

 

 

Hope that helps. 

 

Regards, 

Ahmed


@Tacko wrote:

Hi.

Is there a possibility to translate/NAT/Forward a VLAN IP to the corresponding IP in another VLAN changing the prefix?

I want to ping from 192.168.10.2 to 192.168.20.2, but the PC is inside the VLAN with IP 10.168.20.2

 

Regardsimage.png