In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

0
votes
0answers
19 views

How to sandbox internal IPs on the same subnet with one to one NAT [on hold]

I am curious as to what technologies are employed to accomplish this with vendors that provide this service. What kind of LAN subnet restrictions can be imposed so that 2 hosts on the same internal ...
1
vote
0answers
20 views

iptables foward to multiple interfaces with NAT

I want to use iptables for provide NAT translation and forward the packets out a different interface. The network set-up is as follows: Alias: eth0:220 with IP address 10.1.1.220 / 255.255.252.0 ...
-3
votes
0answers
18 views

Can two client behind a NAT connect to the same server ? How does it work? [on hold]

For example, at home, can two computers use youtube at the same time ? How does it work ? I thought that the NAT in the ISP box use a table to translate the private ip to the public ip, and keep in a ...
-1
votes
0answers
12 views

Route traffic to internal device on local address for internal clients

There is no DNS server at the site, so the URL is always resolved to an external address on the Firewall. Hence traffic originates on the local network, goes out the firewall and cannot connect to the ...
-1
votes
3answers
39 views

Why can i not ping my host behind the firewall. Cisco asa 5505 [on hold]

Can anyone please help me to figure out what in my configuration of the Cisco asa 5505 is wrong or missing. I have multiple host behind my firewall these hosts run different websites on port 80. I am ...
1
vote
1answer
29 views

How the firewall is allowing Facebook requests to bypass itself?

I've a McAfee Firewall configured at my workplace. It actively blocks all the requests for websites like https://www.Flipkart.com https://www.Amazon.com https://www.Facebook.com I's playing ...
-1
votes
1answer
34 views

Routing between Two Host-Only Networks [on hold]

I have two routers on VMWare workstation, Router01 and Router02, both are set up as Host Only Networks. I need to route between the two networks, so that from Router01 I can ping the public endpoint ...
0
votes
1answer
27 views

Cisco IOS, Multiple WAN & Port Forwards (Outside -> Inside PAT)

I have been trying to work out how to accomplish PATing from Outside to Inside on a Cisco IOS router, in this case specifically a Cisco 2901 running IOS Version 15.1(4)M1. Firstly, the problem I am ...
4
votes
0answers
73 views

Why would you internally use NAT? [closed]

I work at a fairly huge company as a software engineer and I would like to understand why an enterprise would internally use NAT. We have several data centers, somewhat geographically close to each ...
2
votes
1answer
16 views

RRAS Server 2012 R2 Not Assigning Network Info or if it does not passing NAT

I wouldn't bother with this for any other reason than the fact that the speeds I get are worth it. Cable Modem (Bridge mode) - Server 2012 R2 (RRAS) - Linksys EA2700 (Bridged as Switch) My issue is ...
0
votes
0answers
6 views

Kerio Control Static Route issue

First of all, thank you for reading this and trying to help me with this issue. I have a Kerio Controll installed in premises in NAT mode with two NICs. LAN: 192.168.1.7 WAN: x.x.x.x I have added ...
0
votes
2answers
43 views

Accessing server without port forwarding

First of all, I know this question has been asked before It seems, however, that none of these yet have a full solution. My question is essentially the same. I have a device connected to a wifi ...
0
votes
0answers
13 views

OpenVZ container(s) and NAT

I have been trying to days to solve my NAT issue with OpenVZ. I have used their guide on their website/wiki, however I just seem to be unable to get it to work. My Linux box is running on CentOS 6 ...
1
vote
1answer
37 views

DirectAccess: Client receiving icmp error from Ipv6 address

Pardon my naivety but I have never setup DirectAccess before, I've done some research prior and was unable to find a relevant resource. Let me provide a little background and then I'll jump into the ...
1
vote
0answers
47 views

Virtual IP Pool for NAT with StrongSwan VPN

I'm trying to wrap my head around a site-to-site VPN configuration using StrongSwan that will allow remote sites to connect to our AWS VPC. The catch is, the remote gateways will potentially be using ...
1
vote
4answers
128 views

Cisco ASA Implicit rule dropping traffic

The network is as follows: Two Default Gateways exist on the network - one which provides connectivity to the an MPLS with several subnets. Let's say 10.0.0.2 Another which is a Cisco Firewall, on ...
0
votes
0answers
22 views

Watchguard VLAN Head-Grasping needed

I am trying to wrap my head around setting up my new watchguard M400. Here's what I need to figure out and what I've done so far. My ISP provided me with a P2P IP, which I plugged into my interface ...
1
vote
1answer
31 views

iptables can't NAT multiple IP addresses

I have a server with two network adaptors: eth0 and eth1. This server is running two distinct https webservers: One is listening on eth0 (172.29.49.112:8443) The other is listening on eth1 ...
0
votes
0answers
41 views

Modify iptables rules when docker container has started

On my debian host I have a few docker containers, which I ran with -restart=always so, they start after host has rebooted. Some of them have exposed ports, and docker host process adds certain ...
0
votes
1answer
30 views

Windows translate external IPv6 to localhost IPv4

I have a machine running Windows server 2012, whose external IPv6 address is "2a01:4f8:190:7449::4". Let's assume it has no external IPv4 address, so the v6 address is the only way of accessing it ...
1
vote
1answer
28 views

How to connect to P2P clients behind a router?

Apologies if this question has been asked before, but I don't think any of the ones I've found are asking quite the same thing. I'm designing a simple P2P protocol whereby a known server provides ...
0
votes
0answers
22 views

SNMP through NAT when server has two IP addresses

We have an SNMP client talking to an SNMP agent through NAT. That works most of the time. We send an SNMP request e.g. from 1.2.3.4:12345 to 10.0.0.1:161 and get a reply from 10.0.0.1:161 to ...
0
votes
0answers
4 views

How to enable ping between machines connected in two interfaces? [migrated]

I have a linux board with two ethernet interfaces as mentioned below. eth0 connected to another linux machine (ad-hoc) eth0 on board 191.168.1.2 connected to Linux machine 192.168.1.3 eth1 on board ...
1
vote
1answer
28 views

Route new outbound traffic

I am looking for some iptables rules which can help me to route some traffic from a server : Client 1 ----| Client 2 ----| |----------| Client N ----| ssh, ...
1
vote
1answer
86 views

Using host's iptables to prevent access to docker-container's exposed ports

I have a host which runs a few docker's containers. This host has a few network interfaces, my goal is make some exposed ports from containers accessible only by certain interfaces, and prevent ...
0
votes
1answer
28 views

ip6tables snat don't work properly [closed]

I got three computers with these names: laptop, vds and home; vds is openvpn server; home is openvpn client. and, I got an ipv6 network 2a01:dead:beef::/64 vds has address 2a01:dead:beef::311 on ...
0
votes
1answer
23 views

Howto forward traffic between multiple OpenVPNs

I have an OpenVPN server which hosts two VPN networks, one is bridged and the other one is routed. See the following draft: The VPNs are working quite well while they are used in isolation. But if ...
0
votes
1answer
292 views

MikroTik - can't access webfig from external / can't SSH into router from external ip

Ok, here's the deal. Let's say that my public facing IP is 10.0.01. I can't webfig into 10.0.01 from external and can't SSH into mikrotik router from external IP. I can do it if I am physically ...
0
votes
0answers
48 views

iptables DNAT packets into an openswan IPSEC tunnel

I have the following network setup: +-----------------------------------+ | | ...
1
vote
1answer
42 views

Apache can't access from wan on archlinux

Information: Archlinux via vmware Have ports 8080, 443 and 80 forwarded to the local ip from router running pfsense I can access the webpage from lan via local ip. My httpd.conf: Listen 80 ...
0
votes
0answers
123 views

can't connect aws VPC private instance to internet through NAT

trying to install a LAMP stack on an aws instance in a VPC private subnet using Scenario 2 described here: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html I've set everything ...
0
votes
0answers
87 views

CentOS 6.6 ignores iptables nat rules

I try to use iptables nat to forward incoming TCP traffic to another computer. I use following rules within nat table: -A PREROUTING -i eth3 -p tcp -m tcp --dport 8888 -j DNAT --to-destination ...
0
votes
1answer
51 views

c7200 IOS 15.x-x NAT/PAT issue

My problem may be just finger trouble, but after fighting with this for a day on what should have taken 5mins, I am getting fustrated. I am not Cisco Certified at any level, just a fair amount of ...
1
vote
2answers
73 views

TCP traffic on port 1433 blocked by NAT rules

We have a SQL server that is hosted on AWS, the SQL server it not directly accessible on the internet, it relies on a NAT box to route traffic to it. We are trying to set up a Linked SQL server from ...
1
vote
0answers
44 views

iptables keeps using old nat rules

I use iptables snat on my gateway to change local source ip addresses to external. The trouble is that after I change the rules (or even if I flush iptables nat table) gateway keeps using the old rule ...
0
votes
2answers
91 views

PFSense IPSEC VPN VLAN

We are integrating with a third party and they require the use of a L2L IPSec VPN for communication. I have successfully configured the IPSEC vpn and the tunel is up but now I cannot seem to have ...
0
votes
2answers
47 views

SIP Trunk for VOIP behind a SonicWALL

I appreciate this question is quite "out-there" but - has anyone had any success with VOIP over SIP behind a SonicWALL. We are having an issue with one-way audio inbound. Essentially, the person ...
1
vote
1answer
164 views

Which SSL certificate would I need for external AND internal domain names?

This is a school-network. Official (outside reachable domain name) is bgschwechat.ac.at (www.bgschwechat..., mail.bgschwechat... and ftp.bgschwechat..) Internally the windows domain is named ...
0
votes
0answers
26 views

L2TP daemon server multiple IP

I have VPS with 3 public IP - Debian 7. I would like to have 3 L2TP damemons (one ip each) NATing traffic to each ip. Something like this l2tp_multiple_public_ip_diagram. I have set up l2tp daemon for ...
1
vote
2answers
62 views

NAT-ing with iptables rewrites source IP in logs

I have the following infrastructure in place: internet [outside 81.x.x.x] router [inside 192.168.1.1] | [network 192.168.1.0/24] ...
1
vote
2answers
100 views

router: ping fails at specific time for 40 seconds

my network looks like this: ISP cable --- ISP modem/router (2 in 1) \ \--- my router --- wifi connection --- computer 1 \----------- cable connection ...
0
votes
0answers
59 views

iptables, outside and inside NAT; Return traffic going out incorrect gateway

Overview (TL;DR at bottom) I have a third party firewall/proxy appliance which is running Linux (Ubuntu), and its routing and firewall engine is backed by iptables and the Linux (source)routing ...
0
votes
1answer
47 views

Windows Server as a PPTP Gateway

I have a Windows Server 2012 server at work, which is currently used as a domain controller, and an internet gateway. The current internet connection uses a USB dongle, which appears like a standard ...
0
votes
0answers
127 views

FortiGate 310B public ip pool into internal port

I have a FortiGate 310B with WAN port with /27 public IP pool from the ISP. The WAN port is configured with primary IP 1.1.1.1/27 I would like to provide servers within the Internal port a public IP. ...
0
votes
0answers
125 views

Cisco ASA firewall blocking requests to internally hosted DNS server

I have a DNS server behind a Cisco ASA firewall. The Cisco firewall is performing NAT. When inside the network, I can NSLOOKUP directly to the server. When the client is external, requests time out. ...
-1
votes
2answers
43 views

Reaching Local Network which is under NAT with no public IP

I have a place called (lets say) REMOTE. REMOTE is connected to the Internet using 3G/4G Modem + Router. Unfortunately my mobile Internet provider does not give me public IP address. In REMOTE I have ...
0
votes
0answers
47 views

NAT and S2S VPN to Azure issue

I can connect to the VNet with on-premise WS2012 R2 RRAS S2S VPN connection successfully. The on-premise WS2012 R2 has two NICs, "External" and "Internal". "External" NIC is facing to a public IP ...
0
votes
0answers
31 views

NAT and DMZ Cisco ASR 1001

OHAI got weird situation on my two Cisco ASR 1001. First one is WAN router, the other one is CORE distribution inside the office. So I've got one public IP on my WAN, and got this particular line: ...
0
votes
0answers
64 views

Change source IP for packet incoming in VPN tunnel

The following configuration allows me to change the source IP from 192.168.0.0/24 to 172.16.0.100 when hosts going to 10.0.0.100 and it works. But I can't achieve this goal for the hosts incoming from ...
0
votes
1answer
70 views

Cisco IOS - Problems with NAT and port forwarding

I have a problem forwarding ports. I have configured a NAT pool of 1 address (192.168.5.2) and assigned that address to the WAN interface. I assigned networks to the access-list, and bind the two ...