GroupStudy.com GroupStudy.com - A virtual community of network engineers
 Home  BookStore  StudyNotes  Links  Archives  StudyRooms  HelpWanted  Discounts  Login
ip nat outside source ... [7:91391] posted 08/01/2004
[Chronological Index] [Thread Index] [Top] [Date Prev][Date Next] [Thread Prev][Thread Next]


I've been playing with NAT today in my home lab and realised something which
is now pretty obvious.

If I have machines outside my network which want to connect to a machine on
the inside, I had assumed I would need to configure an

  ip nat outside source static addr1 addr2

or dynamic variations thereof.  I discovered that actually configuring 

  ip nat inside source static addr3 addr4

did what I was trying to do, which I guess is logical.  The NAT works in
both directions.  That left me pondering what 'ip nat outside ..' is for. 
Perusing the archives and others seems to indicate that it is usually used
when re-numbering at which point it dawned on me with a 'doh' moment that
what is being translated is the source IP - just like the command says.

So - I want to just make sure I have the right end of this particular
stick.  One would only config. 'ip nat outside addr3 addr4' if you want the
inside machines to believe that they are being contacted by addr4 even
though the machine trying to make the connection is actually addressed as
addr3.

That make sense?

cheers
Danny


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=91391&t=91391
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html