traffic redirection at Cisco router

[wildker-vit]

Hello, Everybody!

Could you explain or give some links to the documents the can explain how destination nat is configured on Cisco routers?

For clear understanding the task is to do the same as Linux iptables netfilter does by following command:

iptables -t nat -A PREROUTING -s 192.168.1.0/24 -d 0.0.0.0/0 -p tcp --dport 80 -j DNAT --to-destination 172.16.1.1:8080

I think configuring wccp for the task would be a good solution but it imposable as Microsoft ISA does not support wccp. Am I right?

[d-mark]

Hi,

take a look at

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094837.shtml

and

http://www.cisco.com/en/US/tech/tk648/tk361/tk438/tsd_technology_support_sub-protocol_home.html

Maybe NAT alone won't do the whole thing and you also need a 'route-map'

HTH

Mark

[wildker-vit]

Thank you.

Actualy, I need to change outside global address for packets coming from local inside addresses.

So, it should be done before routing process in most cases, but according to NAT Order of Operation

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml

it can be done only by policy routing.

route-map allows to check an ip address and set an ip address, but is it destination or source ip address?

Does anybody have any ideas?

[lvanacker]

did you solve the problem, i have the same concern i want to redirect all smtp traffic to one smtp server ?

thanks

Luc

[wildker-vit]

yes, but with a kind of exeptions:

route-map redir-map

match web-traffic

set ip next-hop 172.16.0.2

if that is not the final destination than you should configure that 172.16.0.2 router also