What is the command to NAT a destination network 10.1.1.Z to another network 192.168.1.Z?

[getaway51]

Hi,

I am trying to Nat a network 10.1.1.0/24 to another network 192.168.1.0/24. When this happens, the last octets Z should remains (e.g 10.1.1.50 to 192.168.1.50), otherwise packets will be lost. Basically it's a 1-to-1 NAT. May i know whts the steps to do this?

[getaway51]

Hi Paul,

1)Does it means that when someone access 100.100.100.5 in Internal LAN, it will be NAT to 192.168.1.5?

2)Also I need to access frm internal to 172.15.1.1/32. Wht would be the cmd like? 

[paul driver]

Hello

LIke i have said traffic originated from the ISP side will only be able to initiate traffic so...

---

@getaway51 wrote:

Hi Paul,

1)Does it means that when someone access 100.100.100.5 in Internal LAN, it will be NAT to 192.168.1.5? -

---

No - it means when someone outside (ISP) trys to  access 10.4.4.x it will get natted to 100.100.100.x for 10.1.1.x

---

@getaway51 wrote:

2)Also I need to access frm internal to 172.15.1.1/32. Wht would be the cmd like? 

---

same as above 

---

---

---

[getaway51]

Hi Paul,

The objective would be, someone from Internal 10.1.1.x/24 access HQ Servers LAN (172.15.1.1/32,192.168.1.0/24)

Can you advise how the dummy network (e.g. 100.100.100.0/24)  and host(101.101.101.1/32) in R2 can be use in this case?

Many thanks!! My idea is internal hosts access these dummy networks and hosts which later translated into 172.15.1.1/32,192.168.1.0/24 from inside to outside.

[paul driver]

Hello

---

@getaway51 wrote:

Hi Paul,

The objective would be, someone from Internal 10.1.1.x/24 access HQ Servers LAN (172.15.1.1/32,192.168.1.0/24)

Can you advise how the dummy network (e.g. 100.100.100.0/24)  and host(101.101.101.1/32) in R2 can be use in this case?

Many thanks!! My idea is internal hosts access these dummy networks and hosts which later translated into 172.15.1.1/32,192.168.1.0/24 from inside to outside.

---

With the config example provided -Only traffic initiated from isp will allow your internal network to reply back to the isp network using that dummy nat translatied subnet 

this is all due to your current topology - meaning R2 being your only nat router and that router also needing to reach the same subnet 192.168.1.x/24 Internally and externally 

[Waqas Karim (CCIE)]

Either of the two solutions: 1. ACL + NAT in & out 2. ROUTE MAP + in & out

[getaway51]

Hi,

Thanks for yr feedback . Wht would be the cmds if just one side (internal LAN to HQ servers LAN) initiate traffic?

Also i was wondering how ROUTE MAP is used here? thanks for guidance!!

[paul driver]

Hello

I have already supplied you with examples for access-lists and route-maps , please review previous posts.

[getaway51]

Hi Paul,

The objective would be, someone from Internal 10.1.1.x/24 access HQ Servers LAN (172.15.1.1/32,192.168.1.0/24)

Can you advise how the dummy network (e.g. 100.100.100.0/24)  and host(101.101.101.1/32) in R2 can be use in this case?

Many thanks!! My idea is internal hosts access these dummy networks and hosts which later translated into 172.15.1.1/32,192.168.1.0/24 from inside to outside.

INSIDE TO OUTSIDE (ONE DIRECTION)

before- source:10.1.1.6/24 , destination:100.100.100.Y/24

after- source:outside ip , destination:192.168.1.Y/24

before- source:10.1.1.7/24 , destination:101.101.101.1/32

after- source:outside ip , destination:172.15.1.1/32

[getaway51]

Hi Paul,

The objective would be, someone from Internal 10.1.1.x/24 access HQ Servers LAN (172.15.1.1/32,192.168.1.0/24)

Can you advise how the dummy network (e.g. 100.100.100.0/24)  and host(101.101.101.1/32) in R2 can be use in this case?

Many thanks!! My idea is internal hosts access these dummy networks and hosts which later translated into 172.15.1.1/32,192.168.1.0/24 from inside to outside.

INSIDE TO OUTSIDE (ONE DIRECTION)

before- source:10.1.1.6/24 , destination:100.100.100.Y/24

after- source:outside ip , destination:192.168.1.Y/24

before- source:10.1.1.7/24 , destination:101.101.101.1/32

after- source:outside ip , destination:172.15.1.1/32