02-28-2012 12:40 PM - edited 03-11-2019 03:36 PM
I am trying to figure out how to use a Cisco 1841 IOS router to take traffic from one interface and source NAT it out towards the Internet on one interface and at the same time NOT perform NAT when sending the traffic towards a different routed interface. Something like this:
RemoteSite(an extension to Main Campus)
|
|
Fa0/1
|
Cisco1841 --- Fa0/0/0-------------------Public Internet (NAT all outbound traffic from "Remote Site",
| no need to NAT from Main Campus)
Fa0/0
|
MainCampus
Here the RemoteSite has connectivity back to the MainCampus, but there is no need to NAT traffic from the one site to the other. They share the same umbrella of address space. However, the RemoteSite needs to have its Internet-bound traffic NAT'ed out to the Public Internet via a third interface.
I know that I could just NAT everything out from the Remote Site and map the traffic back onto the same address space for intra-campus communication, but I'd rather avoid that and just NAT where I need to NAT it to the Internet.
I do have a caveat here: in the event that either the MainCampus or the Public Internet interfaces go down, I would like to failover traffic from the downed link to other good link. For example, I want to NAT all traffic (including "intra-campus" traffic) out via the Public Internet if the direct link to the MainCampus is down. For the other example, if the Public Internet direct link is down, I would just send out all traffic without NAT towards the MainCampus.
Any ideas?
Thank you.
Clarke Morledge
College of William and Mary
Solved! Go to Solution.
02-28-2012 04:48 PM
Hello Clarke,
I think you need to post you question on the routing section instead of security, to the correct expect can help you.
If I understand what you want to do...
You have three interfaces and need to NAT from interface1 to interface2 but not from interface1 to interface3.
Since you can specify the interfaces that participate on NAT, just don't include the MainCampus interface.
interface F0/1
ip nat inside
interface F0/0
ip nat outside
interface F0/2
-----
I hope it helps.
Felipe.
02-28-2012 04:48 PM
Hello Clarke,
I think you need to post you question on the routing section instead of security, to the correct expect can help you.
If I understand what you want to do...
You have three interfaces and need to NAT from interface1 to interface2 but not from interface1 to interface3.
Since you can specify the interfaces that participate on NAT, just don't include the MainCampus interface.
interface F0/1
ip nat inside
interface F0/0
ip nat outside
interface F0/2
-----
I hope it helps.
Felipe.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide