First, apologies for posting this in 2 forums, but I wasn't sure whcih one to go with.. I'm running a 2651XM router with CBAC and nat enabled on the outside interface.
Can anybody shed some light on the best way to do this.. I have a server on our inside network 1.1.1.1 that needs to ftp to two ftp servers on our outside network - 2.2.2.2 and 3.3.3.3. Further, server 3.3.3.3 (outside) is required to access the ftp server on 1.1.1.1 (inside) .
Ordinarily this would not be a problem, however, when connecting to the outside host 2.2.2.2 the ftp client (1.1.1.1 ) must use the source IP 4.4.4.4. Also, when connecting to the other outside host, 3.3.3.3, the ftp client (1.1.1.1 ) must use the source ip of 5.5.5.5... Finally, this ip ( 5.5.5.5 ) is also the destination ip that 3.3.3.3 must use when making its inside connection to 1.1.1.1's ftp server.
I have tried every combination of static nat and dynamic nats with acl's and route maps, but I'm not having much luck. I would the best scenario is to have a simple static nat for 1.1.1.1 to connections to and from 3.3.3.3. However, if I add a dynamic nat for 1.1.1.1 to 2.2.2.2, my ftp client always picks up the ip used to connect to the other server.
I can post sample configs if you want, but I'd rather not lead people astray with my own "interpretation" of the rules required... I'd be interested to see what others have to say.
Cheers
M
