Nat using serial interface address

[georgeburtz]

I have a router in a customer site that accesses our servers. I want to statically NAT the customers source address so our firewall will allow it. Will NAT work correctly using the ip address of the serial inteface?

ip nat outside source static 66.162.222.81 10.228.25.13

10.228.25.13 is the serial int of the router and the serial is defined as the inside interface.

Thanks for any suggestions!

[thisisshanky]

In this case serial interface is inside interface. You just want to translate your customer's source IP to something else. So you should use inside source and not outside source.

Hope that makes sense...

[georgeburtz]

I can see the inbound traffic being NATed correctly in the FW log, but I am wondering if the IOS will handle the return traffic (un-NAT) if the serial int of the router is used as a "hiding" address.

[thisisshanky]

George,

Ignore my previous post. I got it all wrong..

It will have to be a different IP that you will have to NAT the source IP of your customer.

[dbellaze]

George,

The return traffic will go through the NAT that has already been created in the router.

Daniel