ip nat inside and outside at the same time.

Ok, my goal is to do something like redirection.

I mean I would like to use a Cisco router as a redirecter that forwards all traffic arriving on a specific address to another host.

Please find the most important statements of the configuration on rtr A (got from scratch) below:

interface Vlan1 ip address ip nat outside ip virtual-reassembly ip tcp adjust-mss 1452

ip route

ip nat inside source static ip nat outside source static

The topology is as follows

router A (Vlan1)-----------(Eth2)router B(Eth0)-------------(Eth)PC

Eth-PC Eth0-rtrB Eth2-rtrB Vlan1-rtrA

on router B I have this statement

ip route

What the rtrA is expected to do by me is to translate the destination address from to and at the same time (say a bit later) to change source address from in to So while sending icmp packets to it receives the same exact packets from after being translated.

This is what is happens on rtrA when from the PC I try to ping


*Mar 3 05:39:48.798: NAT*: o: icmp (, 1024) -> (, 1024) [41569] *Mar 3 05:39:48.798: NAT*: o: icmp (, 1024) -> (, 1024) [41569] *Mar 3 05:39:48.798: NAT*: s=>, d= [41569] *Mar 3 05:39:48.798: NAT*: s=, d=> [41569] *Mar 3 05:39:54.026: NAT*: o: icmp (, 1024) -> (, 1024) [41605] *Mar 3 05:39:54.026: NAT*: s=>, d= [41605] *Mar 3 05:39:54.026: NAT*: s=, d=> [41605] *Mar 3 05:39:59.026: NAT*: o: icmp (, 1024) -> (, 1024) [41612] *Mar 3 05:39:59.026: NAT*: s=>, d= [41612] *Mar 3 05:39:59.026: NAT*: s=, d=> [41612] *Mar 3 05:40:04.038: NAT*: o: icmp (, 1024) -> (, 1024) [41619] *Mar 3 05:40:04.038: NAT*: s=>, d= [41619] *Mar 3 05:40:04.038: NAT*: s=, d=> [41619] yourname(config)# yourname(config)# yourname(config)#do sh ip nat tra Pro Inside global Inside local Outside local Outside global

--- --- --- icmp

--- --- --- yourname(config)# yourname(config)# yourname(config)#

*Mar 3 05:41:04.482: NAT: expiring ( icmp 1024 (1024) yourname(config)#

It seems to me that the rtrA makes correctly the translation but I don't get any response on PC. Is it correct or maybe there is another way to do what I want? In some way I would do some sort of "proxy". I reported an example with icmp protocol but it will be used with tcp and udp protocol. I tried with telnet but it didn't work too. Many thanks and sorry for the long post.


Reply to
Loading thread data ...

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.