cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3278
Views
0
Helpful
1
Replies

ip nat inside destination command usage

sarahr202
Level 5
Level 5

Hi every body.

Let say  we want our nat router to change destination ip for packets received on its f0/0( ip nat inside)  interface from h1.  The network is topology is as follows:

h1---------f0Rs0------internet

The goal is every time router receives a packet destined for 10.10.10.10 from h1,  router must change the destination ip to 200.200.200.1

Our routing table at R:

C 199.199.199.0 f0/0

S0  100.100.100.0/24

S*   0.0.0.0  0.0.0.0   100.100.100.2  ( pointing to default gateway at ISP)

============================================

Our router config:

access-list 10 permit 10.10.10.10 0.0.0.0

access-list 10 permit any


ip nat pool zee 200.200.200.1 200.200.200.1 netmask 255.255.255.0

ip nat inside destination list 10 pool zee

f0/0

ip nat inside

s0/0

ip nat outside

Now the question is  what will router do?   will it perform ip look-up first for destination ip then perform nat for packets destined  for 10.10.10.10 on f0 ( ip nat inside)  interface?  If yes, then router  will simply drop packet as destination 10.10.1 is not in its routing table.   correct?  if correct  then how could we establish communication in such case.?

Note:

In last thread,  i learned that  if a router ,configured with " ip nat inside source"   command,  receives a packet on its " inside interface"  (  the interface configured with ip nat inside command),  router  perform ip look up first than nat.   Will a router configured with " ip nat inside destination " command will still behave identically on its " inside interface" i.e   will router perform ip look up first then nat ?

thanks and have a great  weekend

Thanks and have a great weekend

1 Reply 1

Akshay Dhawale
Level 1
Level 1

Did you get any solution for this.. I am having the same problem.

I got this link, but not sure how much this will help, because he uses ip nat outside source (to change the destination IP of the packet - It does change that, but I am not able to get what I wanted to do..end to end / site-to-site NAT over Internet)

http://blog.lemieuxnc.net/2010/09/cisco-ios-destination-nat.html