03-29-2005 06:25 AM - edited 03-03-2019 09:09 AM
I have to perform many NAT translations on a router (over 300) for a management issue and I'd like to find a way to do that without having to set every single NAT command on the router.
Is there any way to do that? I thought of using wildcards or something of the sort but don't know if it's possible.
Thanks a lot,
Enric
Solved! Go to Solution.
03-29-2005 09:32 AM
Then this might help you.
ip nat inside source static network 10.10.10.0 192.168.17.0 /24
In this example it will NAT only the three first octets(24 bits), leaving the rest untouched.
eg. 10.10.10.27 will become 192.168.17.27,
10.10.10.141 will become 192.168.17.141 and so on and so on.
03-29-2005 09:32 AM
Then this might help you.
ip nat inside source static network 10.10.10.0 192.168.17.0 /24
In this example it will NAT only the three first octets(24 bits), leaving the rest untouched.
eg. 10.10.10.27 will become 192.168.17.27,
10.10.10.141 will become 192.168.17.141 and so on and so on.
03-30-2005 11:06 AM
you just need to look at your security and control over the nating.. If you do this any host with that internal ip will be allowed to go outside.. and you do not have control of selectively doing something..
regards
Rakesh
=====
03-30-2005 11:16 AM
That could be fixed by using a route-map.
Like this:
ip nat inside source static network 10.10.10.0 192.168.17.0 /24 route-map ALLOWED
ip access-list standard ALLOWED-LIST
deny 10.10.10.14
deny 10.10.10.26
permit 10.10.10.0 0.0.0.255
route-map ALLOWED permit 10
match ip address ALLOWED-LIST
This way, host 10.10.10.14 and 26, wouldn't be NATtet, all others would.
03-30-2005 04:38 PM
I need to do something similar and wondering if there are any good examples on CCO (hopefully with digrams) that show "static" natting
03-30-2005 05:05 PM
I would suggest to go for PAT instead of Nat this will make your life easier if no such security concerns you have...
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide