Using a Router to NAT/PAT Several Different IP Addresses

[plckidd]

Hi,

I work in the manufacturing industry and have the need to communicate with 8 of our production lines (PLC/PC). The company who built the machines for us has used an IP address of 192.168.1.160 on all their machines. Our process network requires an IP address of 10.117.20.1-244. My question is this: Can I get into the interface of the router and assign/configure each Ethernet port (Inside) to an Ethernet port (Outside) and translate each address? I have looked into Allen Bradley NATR devices, but was looking into an alternative.

This is what I am trying to describe in details,

Example: Host PC = 10.117.20.1  NAT Route to  Source PLC/PC = 192.168.1.160 (Machine 1)

               Host PC = 10.117.20.2  NAT Route to  Source PLC/PC = 192.168.1.160 (Machine 2)

               Host PC = 10.117.20.3  NAT Route to  Source PLC/PC = 192.168.1.160 (Machine 3)

               Host PC = 10.117.20.4  NAT Route to  Source PLC/PC = 192.168.1.160 (Machine 4)

[Flavio Miranda]

Hello @plckidd

 All machines use the same IP address 192.168.1.160 ? Or they are on the Network 192.168.1.X ?

-If I helped you somehow, please, rate it as useful.-

[plckidd]

All the machines use the same IP address. 192.168.1.160

[plckidd]

Yes, they are all on that machine network.

[Flavio Miranda]

Thinking in a basic network I dont believe this can be accomplished. 

If understood it right and all machine has the same IP address  192.168.1.160, How could you allow this communicate with Firewall in the first place.

If you install a switch in layer 2 mode you are going to have physical connective with firewall via uplink between Switch and Firewall. Then, the Firewall Interface needs to have an IP address on the Network  192.168.1.0, let´s say ip address 192.168.1.1. 

 First of all, this machine should complain about another machine to have the same IP as yours on the network segment. But, let´s imagine that it doesn´t.

 How do you suppose Firewall can deliver packet if all the host on that Interface has the same IP ? 

 NAT will not solve the problem. ASA needs to differentiate each host in order to deliver packet on the local interface.

 Further more, probably you will not be able to even create a NAT rule with the same IP address on all of them. You probably will receive some message of IP overlaping

You need to put something in front each Machine with two interface (small router) then you can put those devices on the network.

-If I helped you somehow, please, rate it as useful.-