Two way address translation
Posted on 2005-04-05
I have a bit of a project here, well more like a quick and nasty hack designed to give some breathing space for a true IP address migration. Basically what I have is the following.
Network A/B/C/D <-----> Firewall
Networks A B C D use X.Y.100.Z, X.Y.101.Z, X.Y.102.Z , X.Y.103.Z ranges and for "political" reasons they need to be migrated to a 10.Y.100.Z, 10.Y.101.Z etc etc addresses as far as the firewall above is concerned.
Now I know that best practise would be to engage in a staged IP migration but the machine in question are legacy machines and arnt normal PC's (closed source boxes) so this will take time.
My idea would be to take a space 1U server with two NICS and setup some form of two way static Nat'ig between the networks and the firewall, my question is what is everyones recomendation about OS to use, windows 2000/2003 or a Linux varient. The only other requirement is that Im not wanting to do this on a PER IP bases, im wanting to say ANYTHING in the X.Y.100.Z range is translated to the equivilant address in the 10.Y.100.Z range.
Im playing with a windows 2000 server box currently but im not sure if it offers the features I require.
Any thoughts, pointers or usefull links.