dual nat problem

[secureIT]

Hi Team,

The setup is like the below.

server1--lan1---firewall1---(wan(ptp))---firewall2---lan2--server2

Let me explain you my requirement, as given below.

when server1 wants to access server2, in firewall2 i have configured natting so that server2 will be transalated to a routable ip address for example 201.100.100.100. At the same time in my firewall i want the server1 has to be natted to the similar ip address of server2 [10.10.10.1], kind of destination nat., assume the natted ip address of server1=10.10.10.2. Now how the return traffic will go through the firewall2, because when server2 responds, it will see that the destination viz., 10.10.10.2 is in the same segment of server1 and it will never send the traffic to its default gateway viz., firewall2 lan ip.

Can anyone revert if this is possible with firewall or router???

[jocamare]

Server2 will look at its arp table and send the traffic to the host with those MAC and IP addresses, which is going to really be the ASA doing proxy-arp for that IP address and giving its interface MAC address so the other hosts will know where to send the traffic destined to 10.10.10.2.