L4 NAT

[ohassairi]

hello

is it possible to make a layer4 natting with PIX 535?

i mean, whem PIX receives a packet from internet, it forwards it to an internal server based on destination TCP port for example :-)

may be i am dreamer but this could save public IP addresses (many public services using only one IP public address)

any comment?

[pjhenriqs]

I believe the concept you are looking for is PAT?

You can NAT all your internal servers to one public address, as long as they are NATed to different ports.

Is this what you are looking for?

[ohassairi]

no, i think PAT is used to allow many internal client to access internet using one public IP address.

i need the other way : from internet to internal.

people from internet will see many internal servers (with different services:web, DNS,ftp,smtp...) by one public IP address.

PIX wll then forward IP packet to destination based on TCP port destination

[amit.secure1]

Yes

You can map many internal servers with single public IP address by using static port translation. port forwarding supported by PIX and ASA also.

[ohassairi]

is there an example in cisco web site?

thanks

[amit.secure1]

Go thrugh given URL http://www.cisco.com/warp/public/556/nat-cisco.shtml

u will find port transaltion in this article

Rgds,

Amit