NAT

[sbjeong]

Is it possible ?

<Case>

Platform: IOS Router or L3 Switch

Does it possible that Static NAT a packet ,source and destination at a time.

ex) svrA IP:1.1.1.1

rtr IP:1.1.1.100

IP:2.2.2.100

svrB IP:2.2.2.1

svrA-rtr-svrB (physically)

svrA a packet(TCP) send to svrB

<sender 1.1.1.1> : src(1.1.1.1)dst(1.1.1.100)->(NAT)-> src(2.2.2.100)dst(2.2.2.1)-> receiver 2.2.2.1

svrA know svrB's IP is 1.1.1.100(but,svrB's real IP is 2.2.2.2) and

svrB know svrA's IP is 2.2.2.100 (but,svrA's real IP is 1.1.1.1)

they can communicate each other.

[Roberto Salazar]

NAT is possible on all routers. NAT, however, is not supported in all L3 switch. It is not supported on Catalyst 3550, Catalyst 3560 and Catalyst 3750.

Please rate helpful posts.

[sbjeong]

please read my question to the last phase.

Does your reply say that a packet SRC,DST NAT at the same time as my case?

[CSCO10408957 · Accepted solution]

Not Possible.

Let's say svrA---Outside(fa0), svrB---Inside(fa1)

First Command:

ip nat inside source static tcp 2.2.2.1 123 interface fa0 123

It changes dstIP but you must specify which tcp port.

Second Command:

ip nat outside source static 1.1.1.1 int fa1

Sorry, no this command. Cannot nat to interface.

You may use:

ip nat outside source static 1.1.1.1 X.X.X.X

but svrB must know X.X.X.X next-hop is rtr.