NAT

[ishwar]

I am using PIX firewall.and I am using command.

static (intf5,intf3) 172.16.0.112 192.168.100.11 netmask 255.255.255.255 But I have to replace router with cisco 1841 router. Now what is the equivalent command in the router for Maping IP address?Please help me.

[Jon Marshall]

Hi

ip nat inside source static 192.168.100.11 172.16.0.112

Note that they are the other way round on router statements.

Under the intf5 equivalent on your router enter

router(config-if)# ip nat inside

and under your intf3 equivalent

router(config-if)# ip nat outside

HTH

Jon

[ishwar]

Thanks Jon,

I think this will solve my problem. But I am confusion that I have just add command.

ip nat inside source static 192.168.100.11 172.16.0.112 in router and did not apply anything in Interfaces.But ping(icmp) is working fine but other(pop,smtp,hhtp..etc) is not working.Is there any reason?Please reply me.

[Jon Marshall]

Hi

It shouldn't really NAT anything until you tell it which interfaces to use so i'm not sure how icmp is working - is it definitley getting Natted.

Jon

[ishwar]

Jon,

Thanks a lot!It has solved my problem and it is working fine.(But I am still in confusion that without applying NAT command in interface -ICMP packet is working ( Get NATted).

Rgds

Ishwar

[ishwar]

Hi John,

Actually I need to shift my email server (192.168.100.11) to another network (172.16.5.11).Now what I want is client should able to pop/smtp from the both IP.what I found is applying command as you say 192.168.100.11(virtual IP) is working fine but 172.16.5.11(real IP) is not working.But using PIX firewall with static command both IPs works fine.what may the actual reason?Please help me