[c-nsp] Nat Issue

Ziv Leyes zivl at gilat.net
Thu Jun 3 11:09:05 EDT 2010


Sorry, I ran out of ideas, I don't really know another way of dynamically mapping an outside port to an inside port based on the inside to outside established session
The only solution I know is mapping the ports statically from outside to inside , but for this you will need to know the exact ports that are needed to be reachable from the outside and then perform a port forwarding to the inside addresses.
Ziv


From: Mohammad Khalil [mailto:eng_mssk at hotmail.com]
Sent: Thursday, June 03, 2010 5:03 PM
To: Ziv Leyes; cisco-nsp at puck.nether.net
Subject: RE: [c-nsp] Nat Issue

Hi man

i applied what you told me about , but it didnt fix it
any ideas that can solve this issue ?

> From: zivl at gilat.net
> To: cisco-nsp at puck.nether.net
> Date: Tue, 1 Jun 2010 12:46:35 +0300
> Subject: Re: [c-nsp] Nat Issue
>
> You can use the "reversible" feature in your nat settings instead of "overload" but as fas as I know the "reversible" keyword is only applicable when you are using route-maps to check which inside addresses shall be translated.
> For example:
>
> ip nat pool NAT 192.0.2.10 192.0.2.10 netmask 255.255.255.0
> !
> access-list 1 permit 10.0.0.0 0.255.255.255
> !
> route-map NAT permit 10
> match ip address 1
> !
> ip nat inside source route-map NAT pool NAT reversible
>
> Hope this helps
> Ziv
>
>
>
> -----Original Message-----
> From: cisco-nsp-bounces at puck.nether.net [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Mohammad Khalil
> Sent: Thursday, May 27, 2010 2:44 PM
> To: cisco-nsp at puck.nether.net
> Subject: [c-nsp] Nat Issue
>
>
> i have a cisco router 1841
> connected to a network game
> now online games need some updates work on specific protocols
> when i connect directly to the up link provider it works fine
> but through the router i cannot get the updates because of NAT
> any ideas to overcome this issue
>
> _________________________________________________________________
> Hotmail: Trusted email with powerful SPAM protection.
> https://signup.live.com/signup.aspx?id=60969
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>
>
>
> ************************************************************************************
> This footnote confirms that this email message has been scanned by
> PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
> ************************************************************************************
>
>
>
>
>
>
> ************************************************************************************
> This footnote confirms that this email message has been scanned by
> PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
> ************************************************************************************
>
>
>
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
________________________________
Your E-mail and More On-the-Go. Get Windows Live Hotmail Free. Sign up now.<https://signup.live.com/signup.aspx?id=60969>



************************************************************************************
This footnote confirms that this email message has been scanned by
PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
************************************************************************************

 
 
************************************************************************************
This footnote confirms that this email message has been scanned by
PineApp Mail-SeCure for the presence of malicious code, vandals & computer viruses.
************************************************************************************





More information about the cisco-nsp mailing list