NATing a public address

[Kevin Melton]

I have a Edge router that faces the internet. The WAN side has a public address. The router then connects into a PIX 515. The network that spans the router to the PIX is simply named 10.10.1.0(10.10.1.1 on pix outside; 10.10.1.2 on FE int on router).

I have a Web Camera that needs to be viewed from the public. How can I set up the router and pix so that when incoming http requests come in; they are nat'ed properly and make it to the camera???

[amit-singh]

Hi,

Do you have a pool of IP addresses from the ISP or a single IP and you are doing PAT on that.

In this case your router will be doing the Natting and this web camera will be accessed by the people from outside using the public IP. I think what we can do is that you can have the IP of the camera set as self-static on the PIX and then natting the IP with a public IP using the Static NAT (if u have a pool of IP).

So on PIX, it would be like

static(inside,outside) x.x.x.x x.x.x.x

Please allow the respective traffic in your access-list on the PIX for the access.

An on router it would be :

ip nat inside source static x.x.x.x y.y.y.y

I think it should do this.

regards,

-amit singh

[Kevin Melton]

I only have one public ip; not a pool...

therein lies the problem. I have it NAT'ing for all users who leave our network now. I am not sure how to make it NAT for people coming inbound from outside....