cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1385
Views
0
Helpful
3
Replies

outside to outside nat/port-forwarding??

mario_kmc
Level 1
Level 1

Hello everyone,

I'm facing a problem in the topology attached.

We connected to a partner (callcenter) using a /30 point-to-point with public addressing. We will not mix our internal addressing.

R3 is partner's router, R1 in HQ router, R2 is our companies branch router where some servers are located.

I want to do NAT on R1 but where partner network sends to TCP8080 on gi0/1.30 public address which is translated and routed to branch router.

My problem: both interface gi0/1.250 and gi0/1.30 are external networks to the internal HQ and I already have some NAT configured from internal HQ to external through branch meaning x.x.x.x is already internal and gi0/1.250 is already external.

How do I configure it? Is there such a thing as outside to outside NAT?

Thanks very much

R1 show version

Cisco IOS Software, 3800 Software (C3845-SPSERVICESK9-M), Version 15.1(3)T, RELEASE SOFTWAR

1 Accepted Solution

Accepted Solutions

blau grana
Level 7
Level 7

Hi mario

Try change your NAT configuration, instead ip nat inside/outside use ip nat enable.

Command

IP NAT Enable

Use

This command is used to enable NAT on an  interface. This command figures out whether the interface is inside or  outside based on the source IP addresses of packets.
IP NAT enable can not translate local router traffic.

Also read theese articles, there is some useful info, cause with ip nat enable, global configuration of NAT is little bit different.

https://learningnetwork.cisco.com/thread/26212

http://www.howtonetwork.net/public/742.cfm

https://learningnetwork.cisco.com/message/60384#60384

Best Regards Please rate all helpful posts and close solved questions

View solution in original post

3 Replies 3

blau grana
Level 7
Level 7

Hi mario

Try change your NAT configuration, instead ip nat inside/outside use ip nat enable.

Command

IP NAT Enable

Use

This command is used to enable NAT on an  interface. This command figures out whether the interface is inside or  outside based on the source IP addresses of packets.
IP NAT enable can not translate local router traffic.

Also read theese articles, there is some useful info, cause with ip nat enable, global configuration of NAT is little bit different.

https://learningnetwork.cisco.com/thread/26212

http://www.howtonetwork.net/public/742.cfm

https://learningnetwork.cisco.com/message/60384#60384

Best Regards Please rate all helpful posts and close solved questions

Hello,

Thanks for your tip. This is completely new for me. I've configured it and I'm waiting for the other side to test. I'll let you know the results

Regards

Mario

Hello,

I tried it first  by configuring nat to interface and it wasn't working. I had to change NAT to ip address and It started working

Mario

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Review Cisco Networking products for a $25 gift card