NAT SoS

[Kane_CCIE]

Hi guys,

I need some advice on a NAT problem.

I have R4 connected to R1 over a point to point serial link (Outside). IP addressing is 172.16.1.0/29 - .1 is on R1 and .2 is on R4. R4 has a loopback 3.3.3.3 (Inside). R1 is on a LAN with R2 and R3. The network is 192.168.1.0/24 .1 on R1, .2 on R2 and .3 on R3. There is full reachability from anywhere to anywhere.

What I want is this.

1. R4 should never NAT if 3.3.3.3 pings R3 and vice versa.

2. R4 should always NAT if 3.3.3.3 pings R2 and vice versa. The NAT address should be 172.16.1.3 (outside) always.

3. R2 should always be able to reach 3.3.3.3 by pinging 172.16.1.3

Configuring a static entry solves issues 2 and 3 but breaks issue 1.

Any ideas please..

[a.cruea1980]

Well, do you have control over all 4 routers? And what are you trying to accomplish? Just keeping certain addresses hidden from certain others?

It seems like you might have to set up a few ACLs on your remote routers to end up getting some of this to work. Just a thought, and it might be the dirty, cheap way to do it.