Re: NAT with two outside interfaces

From: lf@elemental.net
Date: Wed Apr 18 2001 - 05:14:23 EDT

Next message: Edward Desouza: "[nsp] CISCO 1924 A IOS CLI ?"
Previous message: Vinod Anthony Joseph Cherunni: "[nsp] REG: PIX Configuration"
In reply to: Steve Yingst \(LMF Staff\): "NAT with two outside interfaces"
Next in thread: Adam Rothschild: "Re: [nsp] Routing Architecture"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

Quoting Steve Yingst (LMF Staff) (runner@lmf.net):

> the serial interface but eth1 should not be able to talk to serial0. Does
> anyone have any good examples on this or reasons why it's not possible.

        It should be possible. You'd have to use two ip nat inside's with
        route-maps and match on the outgoing interface or next-hop. See
        http://www.cisco.com/warp/public/105/nat_routemap.html.

ip nat pool ETH1 10.0.0.1 10.0.0.254 prefix-length 24
ip nat pool SE0 10.0.1.1 10.0.1.254 prefix-length 24

ip nat inside source route-map ETH1_MAP pool ETH1
ip nat inside source route-map SE0_MAP pool SE0

route-map ETH1_MAP permit 10
match interface eth1

route-map SE0_MAP permit 10
match interface se0

        int eth0
         ip nat inside
        int eth1
         ip nat outside
        int se0
         ip nat outside

Cheers,
Lars.

-- 
Lars Fenneberg, lf@elemental.net (private), lf@mcs-cityline.net (work)

Next message: Edward Desouza: "[nsp] CISCO 1924 A IOS CLI ?"
Previous message: Vinod Anthony Joseph Cherunni: "[nsp] REG: PIX Configuration"
In reply to: Steve Yingst \(LMF Staff\): "NAT with two outside interfaces"
Next in thread: Adam Rothschild: "Re: [nsp] Routing Architecture"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Mail actions: [ respond to this message ] [ mail a new topic ]

This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:35 EDT