[nsp] ip inside global -> ip inside static

From: kevin graham (kgraham@dotnetdotcom.org)
Date: Thu Oct 18 2001 - 17:08:05 EDT


I've got a number of 'ip inside source static tcp' entries to enable
access to some inside servers. At the same time, there's an 'ip inside
source' global to accomodate outbound access for the users.. ie:

access-list 10 permit 192.168.0.0 0.0.0.255
ip nat pool GBL 1.1.1.2 1.1.1.2
ip nat inside source static tcp 192.168.0.10 1.1.1.3 25 extendable
ip nat inside source list 10 pool GBL overload

Docs indicate that it's not possible, but I'd like to have clients on
192.168.0/24 be able to connect to 1.1.1.2:25 -- as is, they get a RST
whenever they try.

Basically, after doing an inside source global translation, I want it to
re-evaluate rules for inside source static's. I've tried workarounds
including seeing if 'ip slb' would get things rolling, and I've found no
love.

Does anyone know of a way to do this?

Thanks.
..kg..



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:13:20 EDT