Questions tagged [nat]
For questions about Network Address Translation (NAT), a method of modifying network address information in IPv4 packet headers.
515
questions
0
votes
0answers
8 views
use NAT overload to solve IP overlapping? [duplicate]
I'm simulating a scenario that two IP subnets are overlapped in a network which merged two organizations.
The primary settings of the network are listed below:
OSPF is utilized to deal with the ...
2
votes
3answers
205 views
BGP and NAT Not working
I have an odd issue with BGP+NAT. I have 2 separate routers and 2 different ISP's.
Topology looks like this:
ISP1--BGP--> RTR1 \
\--OSPF-- Palo Alto Firewall-- Internal ...
1
vote
0answers
38 views
Strange traceroute behavior when using iptables/nat to redirect an IP [closed]
A client of mine has a network 10.0.1.0/24 that has the following systems (among others):
10.0.1.254 Main router
10.0.1.4 Linux server
10.0.1.8 Windows server
The windows server ...
0
votes
1answer
44 views
LAN to WAN IPv4 address mapped to LAN server through NAT Rules or other
I need to set a rule that allows me to connect BOTH from OUTSIDE the LAN (from the "internet" to the Internal server at IPv4 address 10.64.0.50 via port 22, by running ssh://1.2.3.4 -p 22; AND
From ...
0
votes
1answer
26 views
NAT on the endpoint
NAT is normally performed on the router to translate addresses from one network's address space to another's. Is there ever a reason to perform NAT directly on the endpoint instead?
For example, if ...
0
votes
1answer
92 views
How does NAT ensure that every machine has a unique public IP?
I am trying to understand the distinction between public and private IP addresses in IPv4 networking. The picture I've been told has some problems with it, so I would like to present it here and ask ...
0
votes
2answers
37 views
How To Route Private Subnet Traffic To Internet Via Public Subnet In The Same AWS VPC?
This scenario is simple, created a VPC (CIDR > 172.16.0.0/16) in AWS Management Console, created 2 subnets in it.
Public (CIDR > 172.16.1.0/24)
Private (CIDR > 172.16.2.0/24)
Public route is set on ...
1
vote
1answer
48 views
How does a DNS response reach a client behind a NAT?
How does a DNS response reach a client behind a NAT? I'm talking about DNS queries using UDP for transport with a server that is not in the same network as the client.
Does the NAT correlate the ...
1
vote
0answers
48 views
Static PAT using Cisco ASA 5506 in cisco packet tracer [closed]
ciscoasa(config)#interface GigabitEthernet 1/3
ciscoasa(config-if)#nameif inside1
INFO: Security level for "inside1" set to 0 by default.
ciscoasa(config-if)#security-level 100
ciscoasa(config-if)#no ...
0
votes
1answer
31 views
Is it possible to see the NAT or PAT mapping from the firewall logs?
Is it possible to see the NAT or PAT mapping from the firewall logs?
For example a Fortigate.
Thank you
This is my previous question which I cannot edit. But here I am posting a precise question.
...
0
votes
1answer
41 views
Cisco IOS RA VPN with internal NAT
We have a Cisco 871 setup with a remote access VPN which works fine. However we now need the RA-VPN to be able to access an IP on the LAN which only speaks with an authorised subnet. IP addresses as ...
0
votes
1answer
16 views
Connect VPN with same Private Network [closed]
i have my Private Network on my Apartment that is 192.168.1.x/24 and in the Office we have Private Network 192.168.1.x/16. Is it possible to connect them through VPN, but i will not change my private ...
1
vote
0answers
35 views
IPsec tunnel with multiple networks NATed
I'm trying to set up an IPsec connection between two sites: our Azure network and our client's local network.
To be flexible and avoid any current or potential future IP range overlappings I wand to "...
0
votes
1answer
60 views
Meraki firewall MX64 how to do two IP seperated inbound NATs
I need to achieve the same result of these two commands which are on Cisco CLI but on Meraki GUI
so we have two valid public IP address(81.1.1.30,31) on outside interface of MX64
both of 'em want to ...
0
votes
1answer
68 views
Nat ACL Question?
I am so confused with fundamentals that I used to be an expert in,
so I have this topology
Please answer to my questions separately,
Question 1) So if I have two DNS severs, and ofc two IP address(...
0
votes
2answers
171 views
How to connect multiple devices with identical static IP into a wireless network
I've been searching StackExchange and the Internet for a while looking for a solution for my networking question. Some articles I found are here, here and here, but these don't need to deal with a ...
0
votes
1answer
49 views
IP address source and destination translation without a gateway
I have a private network (no gateway) with a number of devices configured on one subnet (say A.A.A.0/24). I would like to change the IP addresses of all devices on this network to a new subnet (say B....
0
votes
1answer
85 views
outside NAT isn't working?
Should static NAT using "outside" work the same as "inside"
Topology:
For example, say I use:
ip nat inside static source 192.168.1.1 10.1.1.50
I try to ping 10.1.1.100 from 192.168.1.1
source ...
0
votes
1answer
76 views
Is UDP Hole Punching possible if the network of one peer has multiple external IP addresses?
I've developed an implementation for UDP hole punching that works for most use cases that I've come across. However, one of our offices has a network configuration where we have two ISPs providing us ...
0
votes
0answers
33 views
MGUARD natting two subnets
I have two subnets:
A: 192.168.1.0/24
and
B: 10.1.0.0/16
With MGUARD GT/GT I would like to perform static NAT to have possibility to manage some devices inside of "A" subnet from "B" subnet.
...
0
votes
2answers
154 views
How to connect four networks with overlapping addresses?
We have four networks for four departments: R&D, Sales, admin and finance. All IP addressing is from the 192.168.1.0/24 network. So, maybe four PCs have same IP address, e.g. 192.168.1.8.
Now, we ...
4
votes
1answer
287 views
TCP connections hang during handshake [closed]
For the last few days, connections originating behind my LAN's NAT have been having issues completing the TCP handshake (i.e. web pages only load after hitting F5 a few times, network applications ...
0
votes
1answer
50 views
Setup VPN to access company's internal network without NAT
Below is how the network looks like, the left is my home, and the right is my office.
Now I want to connect to office intranet(192.168.0.0/24, R3). We don't have any vpn device that directly connects ...
5
votes
1answer
179 views
What does NAT64 do which can't be done by deploying IPv6 + NAT444?
Why was NAT64 developed? What does it do that can't be done by deploying IPv6 + NAT444, and allocating your customers a (public) IPv6 and a (private) IPv4 address (behind a shared public IPv4 address)?...
1
vote
1answer
35 views
Origin of Cone in NAT naming convention
I am reading about Full Cone, Restricted Cone and Port Restricted Cone NATs. While how they work is clear, I am having trouble coming up with a justification for such naming. The "Cone" probably has ...
0
votes
3answers
829 views
Why isn't 10.0.0.0/8 used instead of 192.168.0.0/16 for private addresses?
RFC 1918 “Address Allocation for Private Internets” (https://tools.ietf.org/html/rfc1918) specifies 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 as private addresses suitable for unrestricted private ...
1
vote
1answer
35 views
Difference Between PAT with pool or Interface/Loopback?
I'm just wondering what difference does it make when doing PAT with same IP defined in pool or assigning IP on Loopback and overloading that interface.
ip nat pool MYPOOL 1.1.1.1 1.1.1.1 netmask 255....
2
votes
1answer
58 views
Is this possible (NAT??)
I have a device on another network, say it's IP is 10.1.1.1
I want to ping it from my own network, say host 192.168.1.1, but I want to ping an address in my local segment to do so,so 192.168.1.2.
Is ...
0
votes
1answer
85 views
How to use IXIA IxNetwork 8.40 to send bi-directional traffic between CPE and router
My setup is:
IXIA -- CPE -- router -- IXIA
I have one end of the IXIA connected to CPE, and getting private IP (DHCP from CPE).
Other end is connected to router side and has public IP.
Traffic ...
1
vote
2answers
43 views
How to configure snat between 2 private networks having different nat pools?
Hi, i'm having some problems with the current configuration i have on this network.
I have two nat pools one for the blue square routers, and another for the yellow ones. And i'm using snat to have a ...
1
vote
2answers
72 views
How to configure NAT between 2 private network ? CISCO routers
If anyone can help with configurations it will be helpful
0
votes
0answers
18 views
Are there NATs which will block any further incoming packets from a peer after rejecting first one?
I'm attempting to test udp hole punching. Right now I'm simply testing how my computer reacts behind a router.
If I send a udp packet from my computer to a server, it can reply back on the same port ...
3
votes
2answers
46 views
Overload PAT Question
Learning details of NAT PAT. I understand basics wherein the PAT router incorporates a source port to ID the private address computer communicating out on the public address, enabling the public ...
2
votes
2answers
156 views
NAT VLANS with same IP subnets and same IP addresses
I want to do something very similar to NAT VLans with same IP sub-nets
but it is dissimilar enough that I don't know how to apply it to my application.
I did find NAT Overlapping but it places ...
8
votes
6answers
4k views
Could IPv6 make NAT / port numbers redundant?
From what I can tell, each process could get its own IP address, with loads of IP's to spare.
What would the drawbacks be?
Essentially, your host would become a router and each process is a host (in ...
1
vote
1answer
84 views
Juniper port forward range of ports with dynamic pppoe
I have Juniper SRX300.
Due to some restrictions, i can't use static WAN IP address.
I need to port forward a range of ports and it's working only using nat static section like this:
username# show ...
2
votes
2answers
63 views
NAT + load sharing
I would like to do NAT while load sharing is active on R1 and R2 (cisco routers).
Do you have any ideas how should I do it effectively?
Is there some way to share a common NAT table between the 2 ...
0
votes
0answers
40 views
How to route a specific users IP from WAN to a specific host IP on a subnet OPT1 (pfsense)
I host a game server, Players and Devs use the same launcher/client that has hard coded ports (5555) that cannot be changed. (No Configuration Files) How would I route Devs to the Development Server [...
3
votes
1answer
61 views
How to send a packet across NAT to local machine
I recently read about network address port translation and I have a doubt.
Lets say I have a PC(PC1) at 192.168.1.2 under a router with public address 10.74.65.11 . I have another PC(PC2) at 192.168.1....
0
votes
0answers
45 views
NAT setup for two LANs on same router
We have a moxa edr 810 series router , we have few devices connected to the router as below.
We are using IPsec tunnel for VPN.
From VPN we are able to connect Device 2 , but not able to connect to ...
0
votes
0answers
38 views
Bi directional natting between two lans
I have two lans , say lan1 and lan2 on my router. My problem is that i tried give a lan1 ip to a lan2 device by using bi directional natting , but what i see is that this lan1 ip always resolve to the ...
4
votes
2answers
2k views
IP addresses from public IP block in my LAN
If I have NAT or PAT applied on edge router, Would it matter if I use IP addresses from public block in my LAN? And how?
1
vote
1answer
68 views
NAT Problem Fortigate 501e v6.0
I created a VIP and am having trouble connecting this VIP to an IPv4 Policy. When I put it into the destination I get an error: "Failed to save some changes: Entry not found." I am trying to create a ...
2
votes
2answers
74 views
ACL: Deny specific host not working
I'm trying to create an acl for use with a nat but I can't get the deny statements working.
All hosts on a private network should be accessible, except from a server which should not be accessible ...
2
votes
2answers
47 views
Does NAT always translate the destination address of a packet?
From https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/13770-1.html
This document provides a sample configuration with the ip nat outside source list command, and ...
0
votes
0answers
21 views
How does this NAT translate the same public address to different private addresses, without using ports? [duplicate]
From http://www.firewall.cx/networking-topics/network-address-translation-nat/228-nat-table.html
translates the same public destination address 203.31.220.134 to different private destination ...
0
votes
1answer
34 views
Without NAT or NAP, can a host in the Internet send a response back to a host in a private network? [duplicate]
Suppose a router device connect a private network and the Internet, and doesn't have NAT or NAPT features.
If some application on a host inside the private network sends some packets to a host in ...
1
vote
3answers
53 views
Is a gateway both a router and a NAT?
From Tanenbaum's Computer Networks:
The general name for a machine that makes a connection between two or
more networks and provides the necessary translation, both in terms of hardware
and ...
0
votes
0answers
106 views
Simultaneous dynamic and static NAT not working
Cisco 4200 series running IOS XE with a single public IP address and dynamic NAT, which works just fine. I am trying to add Static NAT to access a server (map external port XX to internal port YY. ...
2
votes
1answer
116 views
Juniper SRX Destination NAT for L2TP server
I have a L2TP server on my LAN which I would like to access from WAN and there is a Juniper SRX standing between these two networks.
I've had some success with this post:
https://forums.juniper.net/t5/...
