Hello:
Have a situation where we're trying to do some NAT'ing with an RV160-K9-NA, using only the LAN ports; there is no connection to the Internet via the WAN port.
The setup: We have an interface device (a Schneider Electric ST6500 HMI running software) that is our connection with an Industrial VPN. Port 2 of the HMI is used for the VPN connection, Port 1 is an independent port with Static IP Address of 10.7.10.3.
We need Port 1 to not only connect with other devices on subnet 10.7.10.x, but also with devices on subnet 10.6.10.x.
One connection we're trying to establish: messages from the VPN come through the HMI interface going to a Destination IP Address of 10.7.10.11. What we want to do is translate the destination IP Address of 10.7.10.11 to the actual target device IP Address 10.6.10.11. We also need this connection to be 2-way, the target device will need to communicate back and forth with the device at the other end of the VPN.
Also, the services of the packets cannot be changed - industrial networking equipment is very fussy about network connections and data exchanges - it must be, those connections must be very reliable and meet strict guidelines.
I have tried various setups/combinations of VLAN's and Policy NAT's (this seemed most applicable to what we're trying to accomplish) and just cannot make it work.
I attached a 2-page pdf document showing the desired NAT table and the physical equipment layout.
Could someone please advise the various configurations that need to be made. The Cisco Configuring Policy NAT and other publications I can find do not address exactly what we're attempting.
Any assistance sure is most welcome.
Thank you!!
