08-01-2006 05:22 PM - edited 03-03-2019 04:19 AM
Is it possible ?
<Case>
Platform: IOS Router or L3 Switch
Does it possible that Static NAT a packet ,source and destination at a time.
ex) svrA IP:1.1.1.1
rtr IP:1.1.1.100
IP:2.2.2.100
svrB IP:2.2.2.1
svrA-rtr-svrB (physically)
svrA a packet(TCP) send to svrB
<sender 1.1.1.1> : src(1.1.1.1)dst(1.1.1.100)->(NAT)-> src(2.2.2.100)dst(2.2.2.1)-> receiver 2.2.2.1
svrA know svrB's IP is 1.1.1.100(but,svrB's real IP is 2.2.2.2) and
svrB know svrA's IP is 2.2.2.100 (but,svrA's real IP is 1.1.1.1)
they can communicate each other.
Solved! Go to Solution.
08-02-2006 11:08 PM
Not Possible.
Let's say svrA---Outside(fa0), svrB---Inside(fa1)
First Command:
ip nat inside source static tcp 2.2.2.1 123 interface fa0 123
It changes dstIP but you must specify which tcp port.
Second Command:
ip nat outside source static 1.1.1.1 int fa1
Sorry, no this command. Cannot nat to interface.
You may use:
ip nat outside source static 1.1.1.1 X.X.X.X
but svrB must know X.X.X.X next-hop is rtr.
08-01-2006 05:49 PM
NAT is possible on all routers. NAT, however, is not supported in all L3 switch. It is not supported on Catalyst 3550, Catalyst 3560 and Catalyst 3750.
Please rate helpful posts.
08-01-2006 06:13 PM
please read my question to the last phase.
Does your reply say that a packet SRC,DST NAT at the same time as my case?
08-02-2006 11:08 PM
Not Possible.
Let's say svrA---Outside(fa0), svrB---Inside(fa1)
First Command:
ip nat inside source static tcp 2.2.2.1 123 interface fa0 123
It changes dstIP but you must specify which tcp port.
Second Command:
ip nat outside source static 1.1.1.1 int fa1
Sorry, no this command. Cannot nat to interface.
You may use:
ip nat outside source static 1.1.1.1 X.X.X.X
but svrB must know X.X.X.X next-hop is rtr.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide