Skip to main content

Questions tagged [nat]

For questions about Network Address Translation (NAT), a method of modifying network address information in IPv4 packet headers.

32 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
8 votes
5 answers
3k views

PAT and Static NAT not working together?

The HQ network is using PAT to gain access to the internet, the internal webserver needs to be accessed from the internet using static NAT. Configs: S_HQ ! interface FastEthernet0/1 switchport ...
Thom's user avatar
  • 81
3 votes
0 answers
260 views

Router as PPPOE concentrator, PPPOE clients unable to get to DMZed static NAT server

I've been trying to figure out this problem, and I'm just not up to the task. I have a Cisco 2911 router as follows: Internet connection on GigabitEthernet0/1. Which has it's own static IP: A.B.C.38/...
Mike's user avatar
  • 131
3 votes
1 answer
148 views

NAT takes me to a wrong place

We have a 5555-x with multiple interfaces. Our Outside interface and DMZ interfaces have routable IP addresses and DMZ subnet is routed via IP address of the outside interface. Stripped for ...
solefald's user avatar
  • 141
3 votes
0 answers
1k views

Cisco 871, NAT, port formwarding and VOIP configuration - phone speaker buzz

I'm new to all Cisco stuff and I need to configure nettalk VOIP. I have Cisco 871 device with two ISP - one via PPP (public IP 666.666.666.666) and one via eth (public IP 999.999.999.999). Main ISP ...
Tttpsamw's user avatar
2 votes
2 answers
339 views

Static NAT and PAT

I have two private IP addresses, want to make them NAT to 203.0.113.0/2 public IP address. WAY 1 : Static NAT (2 ip addresses NATted to one by manually) WAY 2 : PAT (Router gives port number ...
CoderBoy's user avatar
2 votes
2 answers
350 views

Nat ACL Question?

I am so confused with fundamentals that I used to be an expert in, so I have this topology Please answer to my questions separately, Question 1) So if I have two DNS severs, and ofc two IP address(81....
Lord Arthas's user avatar
2 votes
0 answers
577 views

How to force route for MIP in screenos, multiple ISP untrust

Scenairo: SSG140 in HA configuration. Four interfaces: LAN (trust) eth0/0 172.20.0.0./24 ISP1 (untrust) eth0/1 1.1.1.130/28 ISP2 (untrust) eth0/2 2.2.2.194/28 ISP3 (untrust) eth0/3 3.3.3.130/28 ...
The Sage's user avatar
1 vote
0 answers
15 views

Firewall not reverse translating NAT address in VyOS GNS3

I'm using two VyOS images as Firewalls in gns3, to which I have connected two routers, one from an inside network and another from an outside network. I configured NAT in both for the internal ...
dyxcvi's user avatar
  • 11
1 vote
1 answer
249 views

Communication between hosts on different local networks

I understand how NAT works in case of communication between one, local host and a server with specific public IP address. The host is sending a request, it pushes the packet with destination IP ...
Bratw's user avatar
  • 23
1 vote
0 answers
273 views

Full Cone NAT on Cisco router in Packet Tracer

I am trying to create a network with two subnetworks with private IPs. I need to configure symmetric NAT on edge routers within the subnetwork. Diagram: I need to configure NAT on Router0 and Router2....
Filip's user avatar
  • 11
1 vote
0 answers
60 views

Configure nat on src ip to dst port

I wondering about some workaround for issue that I have: I have 2 sources which generates multicast to 224.1.1.1 and port 12345. I'd like to configure on my Cisco IE 3000 NAT which will change the ...
user1977050's user avatar
1 vote
0 answers
205 views

Cisco L2TP Tunnel and NAT

I have problems with NAT clients connected to an AP . This AP has an L2TP tunnel established to a Cisco router (7206VXR). The session is UP and the router can ping the IP of the client. The client ...
RS1983's user avatar
  • 501
1 vote
0 answers
641 views

VPN tunnel with duplicate subnets

I have been tasked to setup a VPN tunnel with an external party's network, but I hit a bit of snag. I am currently running a Cisco ASA 5510 with private subnets of 10.1.2.0/24 on the "inside" network....
jaglin84's user avatar
1 vote
0 answers
772 views

Access Extern IP behind NAT

I have found many articles, possible solutions to this topic, but no one seems to have the same problem as me. I am working on a Cisco 1812 Router with IOS 12.4. I have found some things like ...
SystemCookie's user avatar
1 vote
0 answers
181 views

Network translation and port forwarding causing host to timeout

I'm trying to setup a small network, consisting of 3 routers and switches, and one L3 Switch: I have activated PAT on both router R1 and R2, to translate from the private IP addresses to the public ...
Ouerghi Yassine's user avatar
1 vote
0 answers
220 views

NAT is not working because of ACL and CLI command unavailable

I have configured ACL for NAT and PFR purpose. ios c1841-adventerprisek9-mz.151-4.M4.bin ip access-list extended PFR permit ip 192.168.0.0 0.0.7.255 any log route-map isp2 permit 10 match ip ...
user2027175's user avatar
1 vote
0 answers
764 views

MPLS L3 VPNs and F5 Route Domains

I realize the F5 community might be the right place for this question, but this concerns routing design as opposed to an ADC design. We are planning to use F5's CGNAT module for NAT'ing our campus ...
aaaa's user avatar
  • 33
0 votes
0 answers
13 views

Cisco IOS XE NAT port-forwarding wtih multiple ports

I am looking for the best approach to organize NAT port-forwarding. The setup is simple: router with one global IP and a local network behind it. Sometimes I need to pass multiple ports into office ...
kab00m's user avatar
  • 203
0 votes
1 answer
90 views

Why does EKS Fargate require NAT?

EKS Fargate is an AWS service for "serverless" hosting of some pods in a Kubernetes cluster. The docs mention that NAT is obligatory, why is this? I tried using traceroute from a Fargate pod....
benjimin's user avatar
  • 103
0 votes
1 answer
174 views

Problem with Configuring Selective DNAT for HTTP Traffic on Fortigate Firewall

I'm currently in the process of setting up a new Fortigate Firewall and have run into an issue while configuring DNAT. From what I understand, this is done through Virtual IPs in Fortigate. My goal is ...
Mischa-H's user avatar
0 votes
0 answers
106 views

Clarification of external interface vs source interface filter in Fortigate DNAT/VIP

On a Fortigate firewall, one can configure Destination NAT using the DNAT & Virtual IPs section of the GUI, or the config firewall vip section of the CLI. When you create a DNAT object using ...
jimbobmcgee's user avatar
0 votes
1 answer
111 views

Problems with twice-NAT on Cisco 3548

I'm trying to get Twice-NAT working on a Cisco 3548 switch. I have a VRF set up with 2 L3 ports on it - Eth1/33 has ip address 20.20.255.250/16 and is nat inside Eth1/34 has ip address 10.10.1.211/24 ...
Kevin's user avatar
  • 101
0 votes
0 answers
570 views

Pfsense NAT with site-to-site VPN

For a client I am building a network solution that enables them expanding their available online presence. I am running into a problem with port forwarding to an IP which is routed over an OpenVPN L3 ...
Koen Vuurens's user avatar
0 votes
0 answers
33 views

How to allow cisco to log on to a specific ip port using nat

Good afternoon, I use Cisco 7201 I create a network on the gi0/0 interface connecting to a dhcp provider and get a static ip address, also on the gi0/1 interface I create a network where my 5 servers ...
ImeanLhas's user avatar
0 votes
0 answers
164 views

How to NAT a unicast address to a broadcast address?

I have a 800-Series router connected in the following configuration: Port GigabitEthernet7 is connected to an external server (192.0.2.251) that sends unicast UDP to destinations 192.0.2.42:45100 and ...
O. Salah's user avatar
0 votes
0 answers
339 views

Configure port forwarding with interface command within VRF

We are working with VRFs and having a look into the NVI NAT configuration. Without VRFs, we can configure following: ip nat source static tcp 10.0.0.2 80 interface Dialer1 80 ip nat source static tcp ...
Mario Jost's user avatar
  • 1,729
0 votes
1 answer
899 views

Cisco NAT - Overload PAT and Static nat from one inside to two outside interfaces

i have following setup Cisco ISR4k Router with one inside LAN interface and two outside Interfaces. ---- WAN1 (NAT outside) LAN (NAT inside) -- ISR4k | ...
Andreas Schaefer's user avatar
0 votes
1 answer
5k views

Destination NAT on Cisco ISR

I know how to perform regular overload PAT in my lab running sh ver Cisco IOS XE Software, Version 16.03.09 Cisco IOS Software [Denali], ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.3.9, ...
o8uijoipjasdfjiloasdfjl32's user avatar
0 votes
0 answers
115 views

CMTS (DOCSIS 3.0) with CGN (CGNat)

For a new project/building I am working with the CMTS model MA5633-XB10 by Huawei. The usual way is done by implementing two DHCP servers in the same VLAN, from which the CPE gets the private IP ...
vega's user avatar
  • 1
0 votes
2 answers
698 views

Cisco router on a stick with public ip wan (ISP)gateway

I am trying to create a router on a stick with an outside facing sub-interface with a public IP from an ISP. I have tried to configure NAT and routing but I just cant get to ping the internet. I'm ...
Kha Kali's user avatar
0 votes
0 answers
407 views

NAT overload and access to web resources

I have really bizarre problem in clients network. Clients have access to the internet via NAPT - I'm using several public ip addreses for this purpose. (I'll change ip addresses for obv reasons) ip ...
vudex's user avatar
  • 45
0 votes
0 answers
439 views

Simultaneous dynamic and static NAT not working

Cisco 4200 series running IOS XE with a single public IP address and dynamic NAT, which works just fine. I am trying to add Static NAT to access a server (map external port XX to internal port YY. ...
user3814483's user avatar