Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

Static NAT Question

Hi Guys,

Im trying to setup a static nat for a branch site so that any packets that come in over the WAN with the destination 192.168.25.148 are translated to 172.18.84.11. Any traffic with the destination of 172.18.84.11 should stay untouched.

I've applied the following config, and it works fine for the 192.168.25.148 address, but then traffic destined for 172.18.84.11 seems to also be affected. So basically, I want both the 192.168 and 172.18 addresses to both work.

Any help would be greatly appreciated.

Config:

ip nat inside source static 172.18.84.11 192.168.25.148

Thanks.

Sent from Cisco Technical Support iPhone App

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Silver

Static NAT Question

Michael

I understand what you are trying to do and the issue is that with static NAT as you have configured it when a packet comes to the router with source address of 172.18.84.11 then the router will translate the source address to 192.168.25.148 since you have defined a simple one to one translation. I wonder if it would work to make the translation conditional. Would you be able to identify certain sources that would access 172.18.84.11 and should not be translated? In that case perhaps an access list could identify who should not be translated and all others should be translated?

HTH

Rick

3 REPLIES
Hall of Fame Super Silver

Static NAT Question

Michael

I understand what you are trying to do and the issue is that with static NAT as you have configured it when a packet comes to the router with source address of 172.18.84.11 then the router will translate the source address to 192.168.25.148 since you have defined a simple one to one translation. I wonder if it would work to make the translation conditional. Would you be able to identify certain sources that would access 172.18.84.11 and should not be translated? In that case perhaps an access list could identify who should not be translated and all others should be translated?

HTH

Rick

New Member

Static NAT Question

Hi Rick,

Ah, I wish I had thought of that before posting!  Yep, it will only be particular souce IP ranges that will be needing the detinstation IP natted, so an ACL will do the trick!

Thanks again, much appreciated!

Michael.

Hall of Fame Super Silver

Static NAT Question

Michael

I am glad that my suggestion pointed you toward a solution. That solution might have come to you eventually, but the nice thing about the forum is that you get the advantage of different eyes looking at the issue and a different perspective on possible solutions that save you some time in getting the problem solved.

Thank you for using the rating system to mark this question as answered. It makes the forum more useful when people can read about a question and can know that a solution was found. Your marking has contributed to this process.

HTH

Rick

248
Views
0
Helpful
3
Replies