[nsp] Cisco NAT quandary

Ed Ravin eravin at panix.com
Fri May 2 16:23:01 EDT 2003


On Thu, May 01, 2003 at 08:33:33PM -0700, rpcbind at speakeasy.net wrote:
> 
> > Is there any way to have two different classes of NAT, or are there
> > any features in IOS other than NAT for remapping ports from one IP
> > address to another like this?
> 
> Learned a hack around this from the list -- add a static host route for each
> of the inbound nats pointing to your next-hop. Inbound will still work, as the
> NAT process will happen on input, and the static will push the outbound packet
> far enough out in the switching path that it can finds its way back in...

What router and IOS did you do that with?  Didn't work for me with my
1720 and IOS 12.1.19 - from the inside network, the IP number responded to
ping (probably from the router), but the telnet attempts did not get
through.


More information about the cisco-nsp mailing list