Backwards NAT Many to One

[cbrun]

I have what is apparently a rather unique need. I need to be able to have host A think it is communicating with 250 different IP addresses, yet they are all the same device. All the examples I have seen want to hit one address and convert it to many NAT'd addresses. I want to take many NAT'd addresses and convert it to a single address.

For example, any packet inbound to the router for address between 10.1.1.1-10.1.1.250 needs to be NAT'd to a single address 10.2.2.1.

I've tried multiple ip nat inside source statments with the same NAT address, but the router rejects that. Attempting to use pools (at least my attempt) has been fruitless. Has anyone done this??

Thanks.

[darkbeatzz · Accepted solution]

if you were to use different port numbers for each nat statement it would be possible but what you are trying to is not to my knowledge.

explain why you are doing this? there could be a better way

[cbrun]

As an explaination. We want to test host A's capabilities to communicate with 250 different target devices. However, we physically only have one target device (and it does not support multiple IP addresses). So the theory was to set up NAT to have host A think it is communicating with 250 different IP addresses, yet they are all sent to the same target address. I need NAT to make sure the source address is changed on the response packets back to host A to complete the deception!

...and thanks, I will try the port number suggestion.

[cbrun]

Thanks ... adding the ports worked!

ip nat inside source static tcp 106.40.196.3 3389 106.40.197.1 3389 extendable

ip nat inside source static tcp 106.40.196.3 3389 106.40.197.2 3389 extendable

ip nat inside source static tcp 106.40.196.3 3389 106.40.197.3 3389 extendable

...

ip nat inside source static tcp 106.40.196.3 3389 106.40.197.250 3389 extendable

[darkbeatzz]

excellent!