network address translation (nat) issue

Discussion in 'Cisco' started by maciek, Dec 29, 2006.

  1. maciek

    maciek Guest

    Hi,

    Is it possible to setup NAT in such a way that hosts from the inside
    network can reach other inside hosts that are statically nated ? (I
    mean NAT that translates, in reality, from ip nat inside interface to
    another ip nat inside interface). If so, how can this be achieved.
    Thanks for any comments or hints.

    Regards

    Maciek
     
    maciek, Dec 29, 2006
    #1
    1. Advertisements

  2. maciek

    mak Guest


    what device/OS/ version are you taking about

    M
     
    mak, Dec 29, 2006
    #2
    1. Advertisements

  3. maciek

    maciek Guest

    Sorry not having mentioned that. We are talking about 2851 Cisco IOS
    Router @ IOS ver 12.3(8).

    maciek
     
    maciek, Dec 29, 2006
    #3
  4. maciek

    Bod43 Guest

    Possibly.

    I would expect (but do not know) that an interface can be
    both "inside" and "outside" at the same time.

    There are also a few non-obvious (to me anyway) 'tricks' available.

    You can create a loopback interface and use policy routing
    to force your traffic from the original source interface to the
    loopback. The loopback could be a nat-outside interface.
    The traffic could then be router normally but has had an
    extra NAT operation available.

    You can put policy maps on your nat statements.
    I believe that this allows the full power of policy
    maps to be applied to natted traffic.
    Various match and set clauses. No idea what you can actually
    use this for though other than sending traffic to loopbacks
    as discussed above.

    There is a document that you may find interesting
    which describes doing NAT on a router with
    only one interface.
    http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094430.shtml
    Network Address Translation on a Stick
     
    Bod43, Dec 29, 2006
    #4
  5. maciek

    maciek Guest

    Hi,

    Thanks for the hints. I will of course try to implement them.
    Unfortunately, this is not possible to have both ip nat inside and ip
    nat outside on the same interface :( this should simplify things but it
    wouldn't. I have also thought about loopbacks&route-maps but I am not
    quite sure if it is the simplest solution. I will try it anyway. Thanks
    also for the link:)

    Regards and a happy New Year :)

    Maciek
     
    maciek, Dec 30, 2006
    #5
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.