10-06-2016 12:36 PM - edited 03-08-2019 07:43 AM
10-07-2016 05:22 AM
Hi,
can you please provide network diagram of your client?
what device are you using ?
10-09-2016 06:53 PM
Hi, Krash.
What I do know is that there is a router ISR G2 series 2900 and in it there are several subinterfaces (this same router is the gateway of VLAN's). As I have already informed the traffic flow is not the internet for LAN, but between local networks or different vlans.
In this specific case, the vlan subinterface 172.1.0.0/24 network is configured with ipnat inside and the other is configured as subinterface ip nat outside
My client's need, as I mentioned earlier, is that both the real ip 172.1.0.75 ip mapped 10.83.0.11 answer on ports TCP/80 and TCP/3389, however only the mapped ip 10.83.0.11 replies and while the real ip 172.1.0.75 stops responding. The real ip just back the answer when I remove the NAT configuration.
Is it possible to make it work that way?
10-10-2016 12:17 AM
Hi,
try this
10-10-2016 07:32 AM
Hi,
10-10-2016 10:58 PM
Hi
can you ping 10.83.0.11 and ping 172.1.0.75 from the router?
10-15-2016 06:53 PM
Hello Krash
Sorry for the delay. Yes I can ping both the 10.83.0.11 as the ip 172.1.0.75 ip. However ping works only for ip 172.1.0.75 before I configure NAT; After configuring the NAT ip 10.83.0.11 's answer and the 172.1.0.75 IP no longer responds
10-17-2016 10:35 PM
IOS static NAT is bidirectional and stateless so it cannot distinguish which side initiates the connection. That is why it cannot handle two entries with the same real IP 172.1.0.75. The router could not decide what to do with packets with srcIP=172.1.0.75 arriving from the server. Should the srcIP be translated or not?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide