12-09-2004 10:52 AM - edited 03-02-2019 08:29 PM
I have a router in a customer site that accesses our servers. I want to statically NAT the customers source address so our firewall will allow it. Will NAT work correctly using the ip address of the serial inteface?
ip nat outside source static 66.162.222.81 10.228.25.13
10.228.25.13 is the serial int of the router and the serial is defined as the inside interface.
Thanks for any suggestions!
12-09-2004 10:56 AM
In this case serial interface is inside interface. You just want to translate your customer's source IP to something else. So you should use inside source and not outside source.
Hope that makes sense...
12-09-2004 11:49 AM
I can see the inbound traffic being NATed correctly in the FW log, but I am wondering if the IOS will handle the return traffic (un-NAT) if the serial int of the router is used as a "hiding" address.
12-09-2004 12:04 PM
George,
Ignore my previous post. I got it all wrong..
It will have to be a different IP that you will have to NAT the source IP of your customer.
12-09-2004 01:40 PM
George,
The return traffic will go through the NAT that has already been created in the router.
Daniel
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide