Questions tagged [dnat]

Destination NAT (DNAT) alters the destination IP of a flow, often to admit traffic from the public Internet into a privately-addressed back-end network. For example, DNAT can translate an arriving TCP session from 192.0.2.100:80 to 10.0.0.100:80 for accessing a web server. Firewalls commonly perform DNAT.

Filter by
Sorted by
Tagged with
1 vote
1 answer
35 views

Linux: address the same IP range (different networks) via two interfaces masqueraded [closed]

Not sure whether it can be done: Due to a legacy setup there are two separate networks that both use the same class C subnet 192.168.0.0/24. I have a Linux box with two physical interfaces wherein ...
user avatar
  • 113
2 votes
2 answers
260 views

Difference between "Destination NAT" and "Port Forwarding"

As far as I can tell "Destination NAT (with PAT)" and "Port Forwarding" are different terms for the same thing, or are there any technical differences? Note: I added PAT because ...
user avatar
  • 153
0 votes
2 answers
103 views

Plant Network Setup

I am looking to setup a plant network as part of a job I am currently working on and I wanted to get some advice on how I am planning on doing it as well as some information at a point where I need a ...
user avatar
2 votes
0 answers
35 views

Single public IP routed to multiple internal IPs by port [closed]

We have a network setup with a Cisco ASA 5515,IPS firewall running ASA 9.8(4)29 and ASDM 7.12(2). I have several rules setup to route public ip addresses and specific ports to specific internal hosts....
user avatar
0 votes
2 answers
73 views

Possible typo in Tanenbaum's book about NAPT

From what I have understood from multiple sources (web and other books) about the concept of NAPT (also called NAT overload or IP masquerading in Linux environment), if there is a scenario like the ...
user avatar
0 votes
0 answers
273 views

NAT overload and access to web resources

I have really bizarre problem in clients network. Clients have access to the internet via NAPT - I'm using several public ip addreses for this purpose. (I'll change ip addresses for obv reasons) ip ...
user avatar
  • 45
1 vote
1 answer
376 views

Juniper port forward range of ports with dynamic pppoe

I have Juniper SRX300. Due to some restrictions, i can't use static WAN IP address. I need to port forward a range of ports and it's working only using nat static section like this: username# show ...
user avatar
  • 93
1 vote
1 answer
2k views

Should DHCP relay and destination NAT work together?

Topology: [PC1]---lan----[RT1 / DHCP relay / DNAT]---wan---[DHCP server] [PC2]---------/ / [PC3]----------/ DHCP relay makes the a DHCP broadcast into a unicast and Forwards it to the DHCP server ...
user avatar
3 votes
2 answers
682 views

NAT simultaneous tcp connection Open

I am trying to understand how the NAT behaves when two peers behind two NATs with two different public ip Addresses try to establish a TCP connection using simultaneous open. I did some research and ...
user avatar
2 votes
1 answer
1k views

use PAT and static nat at the same time as inside and global nat interface

I've setup a network consisting a "AUTOMAÇÃO->Automation" lan, "Rede interna->Internal network" and the WAN (f0/1). Every device is cisco except 200A (fortigate). Everyone on internal network must ...
user avatar
  • 153
3 votes
2 answers
1k views

Alias IP Address in VyOS

I have a network where I am looking to alias an IP address/port and redirect it to another machine. VyOS is on my network at 192.168.55.1 and I have another device on the network at 192.168.55.66. I ...
user avatar
2 votes
1 answer
1k views

Understanding NAT loopback problem

I'd like to understand why trying to connect to a server in the same network, using the public IP address (provided by the router/NAT), and the port doesn't' work. (I'll assume two interfaces in the ...
user avatar
  • 183
2 votes
2 answers
11k views

Mikrotik RouterOS - NAT to multiple ports on the same IP [closed]

Some network services require a group of open ports, and those might not even be next to each other (by port number, I mean). What I'm doing still is I create a dst-nat rule for each port that ...
user avatar
  • 135
0 votes
1 answer
842 views

Cisco ASA Static NAT with SLA tracking

I don't believe this is possible iwth the Cisco ASA series, but figured I would as the community. If I have an Cisco ASA, can I use the sla feature to track a NAT statement? for example. objReal1=10....
user avatar
  • 813
7 votes
2 answers
10k views

Source NATing Fortigate typical scenario

I have a small query with respect to NATing in Fortigate.I'm struck in particular by a scenario where the remote network allows users with a specific IP range with a specific port for RDP over a ...
user avatar