natting

silverfoxx · ‎05-05-2010

Hi All,

we have two different vlan's, vlan # (1) 172.14.2.0/24 and vlan # (2) 172.15.2.0/24 on the cisco 6500 with FWSM, recently we have moved a server in vlan # (1) which was before on another vlan # (3) 172.23.0.0/16 on the same cisco 6500.

Before,we had some servers on vlan # (1) & vlan # (2) running certain applications which were connecting to this server using it's IP ADDRESS instead of it's hostname.

My question to you all is that can it be possible for us to use the FWSM on 6500 to do NAT in such a way that servers in vlan # (1) & vlan # (2) can still be able to connect to this server using it old IP ADDRESS (172.23.4.200) although it is now sitting in vlan # (1) which IP ADDRESS (172.14.2.200)

what I was thinking that maybe we can do some kind of conditional NAT or STATIC, e.g. server 1 in vlan # (2) traffic arrivies to FWSM on cisco 6500 attempting to connect to 172.23.4.200 (which ofcourse does not exist anymore) FWSM changes it's destination IP bases on NAT or STATIC and let traffic go to vlan # (1) where the server actually resides..

any help would be much apperciated .

Ganesh Hariharan · ‎05-05-2010

Hi All,
we
have two different vlan's, vlan # (1) 172.14.2.0/24 and vlan # (2)
172.15.2.0/24 on the cisco 6500 with FWSM, recently we have moved a
server in vlan # (1) which was before on another vlan # (3)
172.23.0.0/16 on the same cisco 6500.
Before,we
had some servers on vlan # (1) & vlan # (2) running certain
applications which were connecting to this server using it's IP ADDRESS
instead of it's hostname.
My
question to you all is that can it be possible for us to use the FWSM
on 6500 to do NAT in such a way that servers in vlan # (1) & vlan #
(2) can still be able to connect to this server using it old IP ADDRESS
(172.23.4.200) although it is now sitting in vlan # (1) which IP
ADDRESS (172.14.2.200)
what
I was thinking that maybe we can do some kind of conditional NAT or
STATIC, e.g. server 1 in vlan # (2) traffic arrivies to FWSM on cisco
6500 attempting to connect to 172.23.4.200 (which ofcourse does not
exist anymore) FWSM changes it's destination IP bases on NAT or STATIC
and let traffic go to vlan # (1) where the server  actually resides..
any help would be much apperciated .

Hi,

Check out the below link on policy based natting on FWSM:-

http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a008046f31a.shtml#t10

Hope to help !!

Ganesh.H

Remember to rate the helpful post