Link to home
Start Free TrialLog in
Avatar of paintco
paintco

asked on

What is the difference between inside and outside Nat ?

What is the difference between inside and outside Nat ?
when shall I use the outside nat or inside nat?
SOLUTION
Avatar of that1guy15
that1guy15
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of paintco
paintco

ASKER

so if I have two sites (Site-A, Site-B)
routing between two LANs of the two sites is ok both LANs are reachable from each other

there are two servers in each site
Site-A  server-1  10.1.1.100/24
Site-A  server-2  10.1.1.101/24
Site-B  server-1  20.1.1.100/24
Site-B  server-2  20.1.1.101/24

I want to NAT the traffic between the two sites as follow
Site-A All clients  NAT to --> 172.16.1.50
Site-B All clients NAT to --> 172.16.2.50
Site-A server-1 10.1.1.100 --> NAT to 172.16.1.100
Site-A server-2 10.1.1.101 --> NAT to 172.16.1.101
Site-B server-1 20.1.1.100 --> NAT to 172.16.2.100
Site-B server-2 120.1.1.101 -- NAT to 172.16.2.101

All workstations and servers should be reachable from each other
Site-A configuration is 
RTR-A# sh run
!
int fas 0/1 
ip add 17.0.10.1 255.255.255.0
!
int se 0/1 
ip add 172.16.1.1 255.255.255.252
!
Core-A# sh run
!
int Gig 0/1 
ip add 17.0.10.50 255.255.255.0
!
int vlan 1 
ip add 10.1.1.1 255.255.255.0
!
##################################################
Site-B configuration is 
RTR-B# sh run
!
int fas 0/1 
ip add 17.0.20.1 255.255.255.0
!
int se 0/1 
ip add 172.16.2.1 255.255.255.252
!
Core-B# sh run
!
int Gig 0/1 
ip add 17.0.20.50 255.255.255.0
!
int vlan 1 
ip add 20.1.1.1 255.255.255.0
!

Open in new window

SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of paintco

ASKER

RTR-A connected to RTR-B through PSTN using BGP routing
Site -A LAN connected to Core-A and Core-A  connected to RTR-A
Site -B LAN connected to Core-B and Core-B  connected to RTR-B
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of paintco

ASKER

RTR-A Fa0/1 going to Core-A
RTR-A Se 0/1 going to MPLS cloud
RTR-B Fa0/1 going to Core-B
RTR-B Se 0/1 going to MPLS cloud

no NAT applied anywhere
only I want to apply Nat on all traffic going and coming for each LAN router interface
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of paintco

ASKER

thanks

What will be the situation if I want to implement NAT on Core switches as followed

Site-A All clients  NAT to --> 17.0.10.50
Site-B All clients NAT to --> 17.10.20.50
Site-A server-1 10.1.1.100 --> NAT to 170.10.100
Site-A server-2 10.1.1.101 --> NAT to 17.0.10.101
Site-B server-1 20.1.1.100 --> NAT to 17.0.20.100
Site-B server-2 120.1.1.101 -- NAT to 17.0.20.101
Avatar of paintco

ASKER

if core platform is 6550 does it will fit and if there are around 50 server need to be nat one to one does it will be headache
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of paintco

ASKER

thanks alot
no problem