[c-nsp] NAT on one interface
Rodney Dunn
rodunn at cisco.com
Wed Aug 22 16:31:02 EDT 2007
Bad idea because it causes process switching.
Don't expect high throughput out of it.
Rodney
On Wed, Aug 22, 2007 at 03:40:55PM -0400, Joe Maimon wrote:
> nat on a stick
>
> http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094430.shtml
>
> Church, Charles wrote:
>
> > Yeah, it's possible to policy route the traffic to a loopback that has
> > nat inside configured on it, and then out the normal interface. It's
> > kludgy, but it'll work, I think.
> >
> >
> > Chuck
> >
> > -----Original Message-----
> > From: cisco-nsp-bounces at puck.nether.net
> > [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Michael Malitsky
> > Sent: Wednesday, August 22, 2007 3:12 PM
> > To: cisco-nsp at puck.nether.net
> > Subject: [c-nsp] NAT on one interface
> >
> > Hello,
> >
> > I am trying to figure out if it's possible to configure NAT in IOS on
> > just one interface. Specifically, say I need to translate traffic flows
> > between X.X.X.X and Y.Y.Y.Y. Y.Y.Y.Y is reachable through one
> > interface, that's my gateway to the "other" network. However, X.X.X.X
> > can be reached through multiple interfaces. Normal NAT configuration
> > requires me to specify a "nat inside" and a "nat outside" interfaces. I
> > can certainly specify the gateway interface to Y.Y.Y.Y as "nat outside",
> > but I don't want to set a bunch of other interfaces as "nat inside" (nor
> > do I want to involve them in NAT processing at all). Is there any other
> > way?
> >
> > Thanks,
> > Michael Malitsky
> > _______________________________________________
> > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> > _______________________________________________
> > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
> >
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
More information about the cisco-nsp
mailing list