Hi Jon,

Thanks for your answer.

If I understand correctly, you propose a NAT solution, and not a PAT solution.

That means my pool must contains as many addresses as the number of source IP to NAT. Is that right?

Regarding my needs, many people, from a customer company, with private addresses (not routable) need to reach a server in my company.

As the router is owned by my company and is used to protect it, the "inside" has been defined on our side and outside on customer's side.

But, as you said, "overload" keywork is not available with "ip nat outside".

Does that mean I'll have to change all the nat configuration by switching inside to outside (and outside to inside)?

Thx in advance for your help.

Jeremie

Jeremie

Apologies, after reading my original post i can see how it may have confused the issue. Yes i am proposing a one-to-one NAT because as you say the overload keyword is not available. Interestingly this type of thing is trivial to do with a pix/ASA. I thought i had done this before on a router but perhaps i am remembering incorrectly.

My point was that you can use any unused IP range (private IP's) to NAT the customer IP's to. As long as the IP range you select is routed back to the inside interface of your router when the server sends a packet back to the client it should work fine.

Jon

Hi, I require the same thing. Have you got any solution?

Hi t4tauseef33,

No, I did not find any solution.

What proposes Jon works but, in my case, I can't use private addresses. I can only use one public address...

The only solution I found is to reverse the NAT (outside->inside changed to inside->outside)

Hi,

did you found decision of your problem?

If you make a static PAT translation from inside to outside it can be uset from outside to inside too.

for example:

ip nat inside source static tcp (inside_interface) 80 interface (outside_interface) 80

Thatway when you attempt to connect from internet to the outside address of your router on 80 port you will be redirected to the inside address that you have defined.

The other thing is to specify witch interface is inside and witch is outside:

#int (inside)

ip nat inside

#int (outside)

ip nat outside

Hope i helped!

regards.

..

You can NOT implement PAT from Outside to inside. Overload is made to translate only Inside traffic.