[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 332
  • Last Modified:

policy based NAT on router

Hello Experts,

It has been a long time since I have done NATing on an IOS router 2600 series with 12.x code.

Assume that f0/1 is IP NAT inside and f0/0 is IP NAT outside.

There is a VPN tunnel with 20.20.20.20 from the outside connecting to my 10.10.10.10 on inside.

When 20.20.20.20 from outside hits my 2800 router to access destination 10.10.10.10, I want it to translate to a source of 15.15.15.15.

It's a piece of cake to do it on an ASA.

0
trojan81
Asked:
trojan81
  • 2
2 Solutions
 
trojan81Author Commented:
anyone?
0
 
jmeggersCommented:
0
 
SanjeevlokeCommented:
interface FastEthernet0/1
 ip address 10.10.10.1 255.255.255.0
 ip nat inside

interface F0/1
 ip address 100.100.100.1 255.255.255.0
 ip nat outside

ip nat outside source static 20.20.20.20 15.15.15.15


Debug O/P
00:29:21: IP: s=15.15.15.15 (FastEthernet0), d=10.10.10.10 (FastEthernet0), len 100, rcvd 3
00:29:21: IP: s=10.10.10.10 (local), d=15.15.15.15 (FastEthernet0), len 100, sending
00:29:22: IP: s=15.15.15.15 (FastEthernet0), d=10.10.10.10 (FastEthernet0), len 100, rcvd 3
00:29:22: IP: s=10.10.10.10 (local), d=15.15.15.15 (FastEthernet0), len 100, sending

R1# sh ip nat translations
Pro Inside global      Inside local       Outside local      Outside global
--- ---                ---                              15.15.15.15        20.20.20.20
--- 10.10.10.10        10.10.10.10        15.15.15.15        20.20.20.20

0
 
trojan81Author Commented:
thank you sanjeevloke,

What if instead of source NATing to 15.15.15.15, I want it to PAT out of the egress interface which is 10.10.10.1.

Would you be able to provide me a sample syntax? Must appreciated!
0

Featured Post

The IT Degree for Career Advancement

Earn your B.S. in Network Operations and Security and become a network and IT security expert. This WGU degree program curriculum was designed with tech-savvy, self-motivated students in mind – allowing you to use your technical expertise, to address real-world business problems.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now