I've been playing with NAT today in my home lab and realised something which
is now pretty obvious.
If I have machines outside my network which want to connect to a machine on
the inside, I had assumed I would need to configure an
ip nat outside source static addr1 addr2
or dynamic variations thereof. I discovered that actually configuring
ip nat inside source static addr3 addr4
did what I was trying to do, which I guess is logical. The NAT works in
both directions. That left me pondering what 'ip nat outside ..' is for.
Perusing the archives and others seems to indicate that it is usually used
when re-numbering at which point it dawned on me with a 'doh' moment that
what is being translated is the source IP - just like the command says.
So - I want to just make sure I have the right end of this particular
stick. One would only config. 'ip nat outside addr3 addr4' if you want the
inside machines to believe that they are being contacted by addr4 even
though the machine trying to make the connection is actually addressed as
addr3.
That make sense?
cheers
Danny
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=91391&t=91391
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html