Skip to main content

Questions tagged [nat]

For questions about Network Address Translation (NAT), a method of modifying network address information in IPv4 packet headers.

Filter by
Sorted by
Tagged with
2 votes
1 answer
1k views

How does a DNS response reach a client behind a NAT?

How does a DNS response reach a client behind a NAT? I'm talking about DNS queries using UDP for transport with a server that is not in the same network as the client. Does the NAT correlate the ...
Philippe's user avatar
  • 125
2 votes
0 answers
349 views

Static PAT using Cisco ASA 5506 in cisco packet tracer [closed]

ciscoasa(config)#interface GigabitEthernet 1/3 ciscoasa(config-if)#nameif inside1 INFO: Security level for "inside1" set to 0 by default. ciscoasa(config-if)#security-level 100 ciscoasa(config-if)#no ...
Dinithi's user avatar
  • 153
0 votes
2 answers
4k views

Is it possible to see the NAT or PAT mapping from the firewall logs?

Is it possible to see the NAT or PAT mapping from the firewall logs? For example a Fortigate. Thank you This is my previous question which I cannot edit. But here I am posting a precise question. ...
Aizzaac's user avatar
  • 103
0 votes
1 answer
82 views

Cisco IOS RA VPN with internal NAT

We have a Cisco 871 setup with a remote access VPN which works fine. However we now need the RA-VPN to be able to access an IP on the LAN which only speaks with an authorised subnet. IP addresses as ...
dmx's user avatar
  • 1
0 votes
1 answer
23 views

Connect VPN with same Private Network [closed]

i have my Private Network on my Apartment that is 192.168.1.x/24 and in the Office we have Private Network 192.168.1.x/16. Is it possible to connect them through VPN, but i will not change my private ...
Jim Pap's user avatar
  • 419
1 vote
0 answers
111 views

IPsec tunnel with multiple networks NATed [closed]

I'm trying to set up an IPsec connection between two sites: our Azure network and our client's local network. To be flexible and avoid any current or potential future IP range overlappings I wand to "...
Arjen's user avatar
  • 11
0 votes
1 answer
843 views

Meraki firewall MX64 how to do two IP seperated inbound NATs

I need to achieve the same result of these two commands which are on Cisco CLI but on Meraki GUI so we have two valid public IP address(81.1.1.30,31) on outside interface of MX64 both of 'em want to ...
Lord Arthas's user avatar
2 votes
2 answers
349 views

Nat ACL Question?

I am so confused with fundamentals that I used to be an expert in, so I have this topology Please answer to my questions separately, Question 1) So if I have two DNS severs, and ofc two IP address(81....
Lord Arthas's user avatar
0 votes
2 answers
3k views

How to connect multiple devices with identical static IP into a wireless network

I've been searching StackExchange and the Internet for a while looking for a solution for my networking question. Some articles I found are here, here and here, but these don't need to deal with a ...
Marc's user avatar
  • 1
0 votes
1 answer
405 views

IP address source and destination translation without a gateway

I have a private network (no gateway) with a number of devices configured on one subnet (say A.A.A.0/24). I would like to change the IP addresses of all devices on this network to a new subnet (say B....
jcvince92's user avatar
1 vote
1 answer
2k views

outside NAT isn't working?

Should static NAT using "outside" work the same as "inside" Topology: For example, say I use: ip nat inside static source 192.168.1.1 10.1.1.50 I try to ping 10.1.1.100 from 192.168.1.1 source ...
user10021657's user avatar
1 vote
1 answer
2k views

Is UDP Hole Punching possible if the network of one peer has multiple external IP addresses?

I've developed an implementation for UDP hole punching that works for most use cases that I've come across. However, one of our offices has a network configuration where we have two ISPs providing us ...
Steve Hardingson's user avatar
0 votes
2 answers
2k views

How to connect four networks with overlapping addresses?

We have four networks for four departments: R&D, Sales, admin and finance. All IP addressing is from the 192.168.1.0/24 network. So, maybe four PCs have same IP address, e.g. 192.168.1.8. Now, we ...
kissinger's user avatar
4 votes
1 answer
645 views

TCP connections hang during handshake [closed]

For the last few days, connections originating behind my LAN's NAT have been having issues completing the TCP handshake (i.e. web pages only load after hitting F5 a few times, network applications ...
rrrrrrrrrrrrrrrr's user avatar
0 votes
1 answer
395 views

Setup VPN to access company's internal network without NAT [closed]

Below is how the network looks like, the left is my home, and the right is my office. Now I want to connect to office intranet(192.168.0.0/24, R3). We don't have any vpn device that directly connects ...
Marv's user avatar
  • 1
5 votes
1 answer
254 views

What does NAT64 do which can't be done by deploying IPv6 + NAT444?

Why was NAT64 developed? What does it do that can't be done by deploying IPv6 + NAT444, and allocating your customers a (public) IPv6 and a (private) IPv4 address (behind a shared public IPv4 address)?...
Roman Starkov's user avatar
1 vote
1 answer
97 views

Origin of Cone in NAT naming convention

I am reading about Full Cone, Restricted Cone and Port Restricted Cone NATs. While how they work is clear, I am having trouble coming up with a justification for such naming. The "Cone" probably has ...
sanjihan's user avatar
  • 113
2 votes
4 answers
11k views

Why isn't 10.0.0.0/8 used instead of 192.168.0.0/16 for private addresses?

RFC 1918 “Address Allocation for Private Internets” (https://www.rfc-editor.org/rfc/rfc1918) specifies 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16 as private addresses suitable for unrestricted ...
lmaooooo's user avatar
  • 147
1 vote
1 answer
241 views

Difference Between PAT with pool or Interface/Loopback?

I'm just wondering what difference does it make when doing PAT with same IP defined in pool or assigning IP on Loopback and overloading that interface. ip nat pool MYPOOL 1.1.1.1 1.1.1.1 netmask 255....
Terminator's user avatar
2 votes
1 answer
110 views

Is this possible (NAT??)

I have a device on another network, say it's IP is 10.1.1.1 I want to ping it from my own network, say host 192.168.1.1, but I want to ping an address in my local segment to do so,so 192.168.1.2. Is ...
user10021657's user avatar
0 votes
1 answer
925 views

How to use IXIA IxNetwork 8.40 to send bi-directional traffic between CPE and router

My setup is: IXIA -- CPE -- router -- IXIA I have one end of the IXIA connected to CPE, and getting private IP (DHCP from CPE). Other end is connected to router side and has public IP. Traffic ...
Nickie's user avatar
  • 3
1 vote
2 answers
239 views

How to configure snat between 2 private networks having different nat pools?

Hi, i'm having some problems with the current configuration i have on this network. I have two nat pools one for the blue square routers, and another for the yellow ones. And i'm using snat to have a ...
rodrigo's user avatar
  • 13
1 vote
3 answers
1k views

How to configure NAT between 2 private network ? CISCO routers

If anyone can help with configurations it will be helpful
Shashi Dhar's user avatar
3 votes
2 answers
88 views

Overload PAT Question

Learning details of NAT PAT. I understand basics wherein the PAT router incorporates a source port to ID the private address computer communicating out on the public address, enabling the public ...
RWB's user avatar
  • 33
3 votes
2 answers
4k views

NAT VLANS with same IP subnets and same IP addresses

I want to do something very similar to NAT VLans with same IP sub-nets but it is dissimilar enough that I don't know how to apply it to my application. I did find NAT Overlapping but it places ...
user643684's user avatar
8 votes
6 answers
5k views

Could IPv6 make NAT / port numbers redundant?

From what I can tell, each process could get its own IP address, with loads of IP's to spare. What would the drawbacks be? Essentially, your host would become a router and each process is a host (in ...
Tobiq's user avatar
  • 213
1 vote
1 answer
660 views

Juniper port forward range of ports with dynamic pppoe

I have Juniper SRX300. Due to some restrictions, i can't use static WAN IP address. I need to port forward a range of ports and it's working only using nat static section like this: username# show ...
Nufay's user avatar
  • 93
2 votes
2 answers
166 views

NAT + load sharing

I would like to do NAT while load sharing is active on R1 and R2 (cisco routers). Do you have any ideas how should I do it effectively? Is there some way to share a common NAT table between the 2 ...
human374's user avatar
  • 383
3 votes
1 answer
76 views

How to send a packet across NAT to local machine

I recently read about network address port translation and I have a doubt. Lets say I have a PC(PC1) at 192.168.1.2 under a router with public address 10.74.65.11 . I have another PC(PC2) at 192.168.1....
user50123's user avatar
4 votes
2 answers
3k views

IP addresses from public IP block in my LAN

If I have NAT or PAT applied on edge router, Would it matter if I use IP addresses from public block in my LAN? And how?
NisaarDeenAzeem's user avatar
1 vote
2 answers
541 views

NAT Problem Fortigate 501e v6.0

I created a VIP and am having trouble connecting this VIP to an IPv4 Policy. When I put it into the destination I get an error: "Failed to save some changes: Entry not found." I am trying to create a ...
user56946's user avatar
2 votes
2 answers
815 views

ACL: Deny specific host not working

I'm trying to create an acl for use with a nat but I can't get the deny statements working. All hosts on a private network should be accessible, except from a server which should not be accessible ...
zusumifa's user avatar
2 votes
2 answers
223 views

Does NAT always translate the destination address of a packet?

From https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/13770-1.html This document provides a sample configuration with the ip nat outside source list command, and ...
Tim's user avatar
  • 1,555
0 votes
1 answer
213 views

Without NAT or NAP, can a host in the Internet send a response back to a host in a private network? [duplicate]

Suppose a router device connect a private network and the Internet, and doesn't have NAT or NAPT features. If some application on a host inside the private network sends some packets to a host in ...
Tim's user avatar
  • 1,555
4 votes
4 answers
1k views

Is a gateway both a router and a NAT?

From Tanenbaum's Computer Networks: The general name for a machine that makes a connection between two or more networks and provides the necessary translation, both in terms of hardware and ...
Tim's user avatar
  • 1,555
0 votes
0 answers
438 views

Simultaneous dynamic and static NAT not working

Cisco 4200 series running IOS XE with a single public IP address and dynamic NAT, which works just fine. I am trying to add Static NAT to access a server (map external port XX to internal port YY. ...
user3814483's user avatar
2 votes
1 answer
733 views

Juniper SRX Destination NAT for L2TP server

I have a L2TP server on my LAN which I would like to access from WAN and there is a Juniper SRX standing between these two networks. I've had some success with this post: https://forums.juniper.net/t5/...
HastDuPasta's user avatar
1 vote
3 answers
693 views

Can a host in a public network communicate with a host in a private network, by layer 3 alone?

Suppose a private network and a public network are connected by a router or some other device. After a host in the private network sends a message (e.g. a HTTP request) to a host in the public ...
Tim's user avatar
  • 1,555
0 votes
2 answers
646 views

What are the differences between packet forwarding and network address translation in layer 3?

What are the differences between packet forwarding and network address translation in layer 3? Is packet forwarding done by a router between two networks that use public IP addresses? Is network ...
Tim's user avatar
  • 1,555
1 vote
2 answers
2k views

Unable to access Server over VPN behind 2 Fortigate Firewalls; however ping is working

Client -> VPN -> FG1 -> FG2 -> Server Created a VPN tunnel with remote IP 10.20.30.4/32 and local ip 10.20.30.40/32 on FG1, NAT/VIP is established with VIP as 10.20.30.40 and server IP as 192.168.2.6 ...
danish's user avatar
  • 141
2 votes
2 answers
750 views

Are both VPN and NAT alternative ways to provide access to a private network?

https://en.wikipedia.org/wiki/Virtual_private_network A virtual private network (VPN) extends a private network across a public network, and enables users to send and receive data across shared or ...
Tim's user avatar
  • 1,555
0 votes
1 answer
2k views

How do i find out if a LAN is behind a multi-level NAT? [closed]

Not much i can specify here - its obvious that my CPE is NATing my LAN, but how do i find out if my ISP is using a carrier-grade NAT (obviously, without asking them)? I heard that port forwarding is ...
Flying Thunder's user avatar
-1 votes
1 answer
125 views

MAc address or IP address? which one gets used from my pc to router? [duplicate]

Question 1) which one is used nowadays? NAT or PAT? Question 2) as I knew, when my pc requests some website, what happens is , the data(packets) from my pc go to router. then router makes the request ...
Nika Kurashvili's user avatar
2 votes
1 answer
64 views

How do I find out which NAT is getting hit?

I can see in packet captures that my packet's destination IP is getting translated. How do I find which NAT statement is responsible for the conversion if my device has over 200 NAT rules? I'm using ...
P_K's user avatar
  • 55
0 votes
1 answer
100 views

How does packet traversal works over a public network with NAT overloading

Let's say I have a private network connected to the internet with default gateway 192.168.1.1 on Router1. Now a host(Host#1, 192.168.1.10) on this network wants to send a packet over the public ...
P_K's user avatar
  • 55
1 vote
2 answers
357 views

How can AWS restrict access by private IP?

The official AWS docs state: If you are connecting through an ISP or from behind your firewall without a static IP address, you need to find out the range of IP addresses used by client ...
DeX3's user avatar
  • 113
1 vote
0 answers
205 views

Cisco L2TP Tunnel and NAT

I have problems with NAT clients connected to an AP . This AP has an L2TP tunnel established to a Cisco router (7206VXR). The session is UP and the router can ping the IP of the client. The client ...
RS1983's user avatar
  • 501
2 votes
0 answers
1k views

Why NAT type detected by `stun` command depends on used STUN server? [closed]

# stun -v stun.counterpath.net |& grep '^MappedAddress\|Primary' MappedAddress = 93.84.76.218:20458 MappedAddress = 93.84.76.218:20458 Primary: Independent Mapping, Port Dependent Filter, preserves ...
Vi.'s user avatar
  • 853
1 vote
2 answers
525 views

Accessing internal website from subnet

I have the following network: - Edge Lite 3 router with public IP on WAN (eth0) and 2 LANs: 1) eth1 192.168.1.11/24 2) eth2 192.168.2.11/24 eth1 is DHCP, I have several work laptops inside. eth2 ...
Alexandru Cojocaru's user avatar
0 votes
1 answer
111 views

A question on NAT [closed]

I know ISP's use NAT to provide a home user with a public IP. If multiple devices connect to the internet using the same router all will have different private IP addresses but similar public IP ...
el duderino's user avatar

1 2 3
4
5
14