Conditional NAT

[andrew.burns]

Hi all,

Is it possible to do conditional destination NAT as follows:

IF

SOURCE = NETWORK X AND DESTINATION = IP ADDRESS Y

THEN

NAT DESTINATION IP ADDRESS Y TO DESTINATION IP ADDRESS Z

I've tried all kinds of NAT/access-lists/policy routing to get this working but

have run out of ideas...

thanks,

Andrew.

[a-vazquez]

Hi Andrew,

In my opinion, I don't think it would be possible to do this.

[steve.barlow]

Not sure if this is what you had in mind but take a look at: http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a0080087bac.html

eg.

ip nat inside source static 11.1.1.2 192.68.1.21 route-map isp2

ip nat inside source static 11.1.1.2 172.68.1.21 route-map isp1

ip nat inside source static 11.1.1.1 192.68.1.11 route-map isp2

ip nat inside source static 11.1.1.1 172.68.1.11 route-map isp1

access-list 101 permit ip 11.1.1.0 0.0.0.255 172.0.0.0 0.255.255.255

access-list 102 permit ip 11.1.1.0 0.0.0.255 192.0.0.0 0.255.255.255

!

route-map isp2 permit 10

match ip address 102

set ip next-hop 192.68.1.1

!

route-map isp1 permit 10

match ip address 101

set ip next-hop 172.68.1.1

Hope it helps.

Steve

[ji.xie]

I implemented this goal two years ago using a c3640.But when you route-map,there is some problem with the NAT for some applications.Maybe cisco i has fixed these bugs.

[andrew.burns]

thanks Steve,

This is exactly what I was looking for. Now for the real challenge - getting an IOS upgrade through change control!

cheers.