About chuck007

chuck007 · 02-02-2010

I just wanted to double check before giving up. There is a server on the DMZ that only supports a single IP address. My client wants to translate 2 public IPs to this one IP on the DMZ. Is that possible?

chuck007 · 10-05-2009

We need to bring in our SIP provider through a publicly addressed connetion and need to NAT it on the firewall. But the NAT only changes the source or destination address of the IP packet. How can we also NAT the SIP body messages for INVITE comman...

chuck007 · 11-29-2007

We are deploying several (6) IDS sensors to monitor traffic on various VLANs on the core router/switch 3750Gs. I can only do two SPAN monitor sessions. Is there a workaround with SPAN or RSPAN so I can mirror/capture traffic for the many IDS sensor...

chuck007 · 12-27-2006

I have a 2600 router on a stick setup with ip helper turned on for DHCP relays. But it's not working. I got encapsulation failed on the debug logs. However I can ping back and forth just fine. Here are the logs:Dec 26 18:18:38.081 PST: IP: s=0.0....

chuck007 · 08-16-2006

Has anyone found a solution to creating a working outbound ACL to limit HTTP access to: http://windowsupdate.microsoft.com? It seems like this site changes IP so often, my ACL is no good after a few days. Our policy requires we implement outbound c...

chuck007 · 02-02-2010

Jorgemcse,This looks like what I am searching for. I think it may work and I don't have to get additional equipment. I will setup a lab and test it out. Thanks.--chuck

chuck007 · 02-02-2010

Ok, I think I found a solution, but you'll have to place the server behind a load balancer (like F5 BigIPs).Web----FW----LB----ServerDo the NAT on your firewall as you normally would:200.200.200.10 = 10.10.10.10200.200.200.11 = 10.10.10.11On the load...

chuck007 · 02-02-2010

Yip, I arrived at the same conclusion as the ASA/PIX primarily looks at source/destination and port to match up on the NAT table. I think in order for this to work in theory, the firewall (maybe Linux) will have to keep track of additional propertie...

chuck007 · 10-05-2009

I did read through that, however it's mainly dealing with inspection as a firewall rather than the SIP translation of the IP address within the body of the packet. We have the basic NAT turned on, but it's not working because SIP embeds the IP insid...

chuck007 · 10-05-2009

I did read through that, however it's mainly dealing with inspection as a firewall rather than the SIP translation of the IP address within the body of the packet. We have the basic NAT turned on, but it's not working because SIP embeds the IP insid...

Member Since	‎10-30-2002 12:39 PM
Date Last Visited	‎08-18-2017 03:53 AM
Posts	39

User Statistics

User Activity

NAT inbound 2 IPs to 1 internal IP, possible?

SIP proxy or NAT on ASA?

How to get more than two monitor sessions on 3750G

encapsulation failed

windows update ACL

Re: NAT inbound 2 IPs to 1 internal IP, possible?

Re: NAT inbound 2 IPs to 1 internal IP, possible?

Re: NAT inbound 2 IPs to 1 internal IP, possible?

Re: SIP proxy or NAT on ASA?

Re: SIP proxy or NAT on ASA?