In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.
0
votes
0answers
15 views
Is it possible to use a different NAT configuation on a Juniper SG 140 for inbound vs outbound traffic?
I will apologize up front if I'm using the wrong terminology on how to describe what I need here. I don't have a lot of network routing experience.
I've found examples of setting up 1-to-1 NAT ...
1
vote
0answers
18 views
OpenStack Server Instances have internet access, but they are unable to access the internal network
I'm running an OpenStack Grizzly release with a Nova-Network configuration. [No Quantium]. My network is setup as follows:
OpenStack Box (10.10.13.xx network)->OpenStack Internal Network ...
1
vote
1answer
44 views
Can you configure SNAT with multiple source IP's and use static DNAT (port forwarding)?
We have a private LAN connected to a firewall with multiple public IP's to use for SNAT in order not to overload the ports on a single IP. However, we have a requirement to allow certain workstations ...
-1
votes
3answers
36 views
Set static IP to a server behind the NAT [closed]
In my company, we just bought a server and now we want to set a static IP to it.
Well, I've contacted my ISP and they said that they can give me static IP. So far, so good.
My question is, where ...
12
votes
7answers
453 views
+250
Why don't more organizations use inside-to-inside NAT or similar solutions to allow NAT hairpins?
Inside-to-inside NAT aka NAT loopback solves hairpin NAT issues when accessing a web server on the external interface of an ASA or similar device from computers on the internal interface. This ...
0
votes
0answers
22 views
Mikrotik: best way to bypass NAT by dst-address?
I tried the solution from http://forum.mikrotik.com/viewtopic.php?f=2&t=14247&p=368912 but CPU load does not decrease, so it seems that conntracking and other CPU intensive things are still ...
0
votes
1answer
41 views
Tunnel Connections through NAT Firewall. [closed]
I am currently working on some design concepts that would see me have the requirements for the following type of system.
In short I am looking at ways to Tunnel a connection through NAT similar to ...
1
vote
1answer
17 views
destinantion-based NAT cisco routers
On a Cisco Router I need to translate "NAT" the LAN IP of some PCs based on the destination e.g. Connecting to 172.16.0.0 /24 Transalte to 172.16.0.100 Connecting to 0.0.0.0 0.0.0.0 Translate to ...
0
votes
0answers
23 views
ssh through a router without port fowarding [migrated]
I have a linux server, and I want to put it in a home network behind a router. I need to ssh to this server sometime from outside, but I don't want to set up port forwarding because I don't have ...
1
vote
1answer
28 views
How can I NAT traffic for one VPN to come from a different IP on Cisco ASA?
I have a Cisco ASA firewall between our private network (10.1.0.0/16) and the outside world, and multiple VPNS going to client sites.
Existing:
[10.1.0.2...] = source client
|
[10.1.0.1 ASA ...
0
votes
0answers
10 views
Sonicwall NAT Policy Pritory Ordering not working
I understand that the priorities of the NAT Policies for a Sonciwall UTM device (we have an NSA 3500) are automatically assigned - a couple of quotes below from the Admin manual makes that clear
"By ...
-2
votes
2answers
42 views
Do I need 2 NIC cards to forward public IP to private IP? [closed]
To use NAT do I need 2 nic cards? I want to use my server for my own business (I don't require VPN) and simply need to forward my public IP to the private IP so that websites show up as ...
0
votes
0answers
23 views
Loosing gateway setting when switching Hyper-V virtual lan to “external”
I have a 2008 R2 server running as a NAT-Router and Hyper-V Host.
NIC1 has the default gateway set to NIC2.
Using this setup everthing works and all clients can connect to the internet.
If I'm ...
0
votes
0answers
26 views
Bandwidth Management & Visibility at Network Border w/ Multiple WAN Links
There is a network that is designed as described below:
The ISP supplies a single physical link with 4 VLANs running to us through that link.
Each VLAN has a specific purpose, 3 of the VLANs will ...
1
vote
0answers
33 views
Puppet agent (v3.0.1) hangs connecting to master (v3.1.1) in VM behind firewall (with NAT based access) - SOLVED
I am using puppet agent v3.0.1 (On FreeBSD), trying to connect to a puppet master v3.1.1 (On Ubuntu) and the puppet agent hangs with the following debug output:
puppet agent --debug --no-daemonize
...
0
votes
1answer
18 views
pfense needs to be rebooted to effect a change in existing NAT
Using PFSense ver:2.0-RC1 (i386)
When changing an existing NAT rule in pfsense I find that the rule doesn't work when:
1. the rule existed but with a change to its port number or destination LAN ip ...
1
vote
0answers
24 views
FreeBSD's ng_nat stopping pass the packets periodically
I have FreeBSD router:
#uname
9.1-STABLE FreeBSD 9.1-STABLE #0: Fri Jan 18 16:20:47 YEKT 2013
It's a powerful computer with a lot of memory
#top -S
last pid: 45076; load averages: 1.54, 1.46, ...
6
votes
1answer
68 views
How do I configure NAT rules when using ASA IP-SLA when leveraging post-ASA-8.3 NAT syntax?
We are currently running ASA9 at a location with redundant ip connectivity. We'd love to configure ip sla so that internet access survives a single carrier outage. I'm aware of the ip sla commands, ...
0
votes
0answers
29 views
set DMZ server on modem that not support DMZ, using port forwarding
I have to see an application server from outside of my network, but the modem that I am using is a Zyxel P-660-HN-T1H that not supports DMZ server configuration.So, which port(s) I should forward to ...
0
votes
2answers
53 views
DSL routing - NAT Virtual server - port forwarding - static ip address
My NAT virtual server - port forwarding has been working fine up to the past couple of weeks.
All in a sudden, it doesn't work.
Setting was done as shown on the link:
I'm afraid it no longer ...
1
vote
0answers
27 views
NAT Pooling with IPSEC source int on Fortinet 60c
I've been working on this one for a while, and been trying to figgure it out but now I've been banging my head against the wall..
We have the following setup:
Fortinet 60c configured with these ...
0
votes
1answer
79 views
install iptables_nat module on centos 6.4 [duplicate]
I am trying to add the following rule:
iptables -t nat -A PREROUTING -p tcp -m tcp --dport 80 -j REDIRECT --to-ports 8080
but what I am getting is:
FATAL: Module ip_tables not found.
iptables ...
1
vote
1answer
40 views
Redirect traffic on port 80 into apache for unknown macs, and into squid for some macs
I have a linux box behaving like a router that handles two network interfaces: eth0 for internet and eth1 for LAN.
I set up iptables in order to redirect all the web traffic coming by the LAN into a ...
1
vote
1answer
31 views
Provide public access to a local web server through VPN
I have a VPN tunnel established between 2 servers: VPS-A and VPS-B having the (fictional) public IP addresses: 66.55.44.33 and 77.88.55.66, and VPN endpoints 10.0.1.1 and 10.0.2.1 respectively.
There ...
1
vote
1answer
115 views
iptables can drop traffic but cannot redirect
Suppose that TCP packets are sent to destination ip (dest_ip) and can be dropped by the following command:
iptables -A INPUT -d dest_ip -p tcp -j DROP
But when I try to redirect the packet using ...
0
votes
1answer
75 views
How to send HTTP request issued by cURL through VPN?
Please excuse me for (probably) the noob question, but I am very new to Linux networking. I've already spent a few days searching the Internet for an answer to my question, but was unable to find one, ...
1
vote
1answer
81 views
tcpdump not picking up traffic redirected by iptables
The following iptables rule is used to redirect all internet traffic coming in from eth1 to port 3000 at localhost (interface lo with ip 127.0.0.1):
iptables -t nat -A PREROUTING -i eth1 -p tcp ...
0
votes
0answers
42 views
Multihoming, NAT and ICMP
My router is the default gateway of a LAN and is multihomed. ISP2 is used for HTTP, HTTPS and ISP1, the default gateway of the default routing table, for the rest of the traffic.
Similar questions ...
1
vote
0answers
26 views
Nat Traversal, peers unable to communicate
I'm currently working on a project that requires NAT traversal but I seem to be running into difficulty. I have the following setup running for testing:
R1, Verizon Fios router connected to the ...
-2
votes
0answers
31 views
Setup website with public load balancer and private application servers [closed]
I currently have a website which i have configured like the following
Public IPAddress1 - Runs apache load balancer, multiple instances of tomcat app server, database.
I would like to split this ...
0
votes
1answer
49 views
Virtual pfSense Appliance on VMWare Host
I am having some issues setting up the WAN side of pfSense.
I have ordered a dedicated box through a hosting service with ESXi loaded on it. Along with that I have 3 public IP addresses that will ...
0
votes
2answers
91 views
cisco ip nat / port forwarding
I have been trying to get port forwarding working with a newly installed cisco router. I cannot seem to find where my fault is and have been looking for quite a while.
The relevant section of my ...
0
votes
0answers
59 views
RRAS there is no NAT option so client can not connect internet over VPN - windows server 2012 hosted on a VPS
i have a windows server 2012 vps
i want to use it as a vpn
so far i built it as vpn but there is no internet connection at the client
after excessive search on the internet i found that i also need ...
0
votes
1answer
38 views
ldirectord NAT load balancing does not work with negotiate checks
I am using ldirectord for loadbalancing two HTTP servers. On the load balancer box i have the following network configuration:
eth0 is used for internal purposes and does not take part in load ...
0
votes
1answer
53 views
Server Hosted at Data center Internal IP address on hyper-v guest OS
I have a hosted server that’s located at a data center that I pay for monthly (www.liquidweb.com). The server is running windows server 2012 standard. The server is used to host a SQL database and a ...
0
votes
1answer
54 views
iptables nat taking 30 seconds to start redirecting
I am implementing a SIP Proxy that should be able to redirect all RTP traffic between two clients that can't reach each other. To implement that, I decided to manipulate the negotiated addresses in ...
0
votes
2answers
53 views
IP and Port Forwarding on ASA 5505
I have an ASA 5505 with outside network of public ips 95.123.234.64/26 and inside network of private ips 10.22.33.0/24. I would like to redirect any tcp traffic that hits 95.123.234.67:80 to a public ...
0
votes
0answers
13 views
How to access the website hosted on the host server from a container in OpenVZ
I have a joomla website installed on the OpenVZ host(192.168.2.152).How do I enable different containers to access this website.Or how do I make an instance of this web server available on each ...
0
votes
1answer
40 views
NAT and find inside global address
To try to find the inside local address of a host, on a LAN with 1 Cisco wireless router, I run nping on one Windows7 host 192.168.1.138.
C:\>nping --ec "public" -c 1 echo.nmap.org
SENT ...
-2
votes
1answer
38 views
Allow LAN to access External Internet, Iptables
I have an internal network behind my router on eth0, and I have my router connected to the internet thorugh wlan0. I can't access the internet from inside the lan, how can I fix this?
wlan0: ...
0
votes
1answer
127 views
NAT / Port Forwarding with iptables firewall [duplicate]
I've got the following setup:
firewall (iptables)
eth0 internal interface, 192.168.2.10
ppp0 external interface, public_ip (IP masquerading)
server1 (192.168.2.11), service 1 (port 443)
server2 ...
0
votes
1answer
80 views
IOS Port Forwarding and NAT involving a VPN
We have a Cisco 1921 router running IOS 15.1 at one of our branches which is connected via a L2L IPsec VPN to a ASA5510 running ASA 8.2 at our headquarters.
The network looks something like this:
...
1
vote
0answers
30 views
Ping respones to floating IPs don't reach the router (iptables/nat)
I'm running OpenStack, and I'm having trouble accessing my instances from floating IPs, from anywhere except the network controller node.
I've got a Folsom deployment with FlatDHCP, not running ...
0
votes
3answers
73 views
IOS Nated port forwarding
I have cisco ios router with ios C1900 Software (C1900-UNIVERSALK9-M), Version 15.2(4)M1. And I have setup Nat with port overload (one public IP). And there is a static mapping:
ip nat source static ...
1
vote
1answer
51 views
Checkpoint - Wifi Bridge mode kills round trip requests?
I'm fairly sure this is either a NAT or routing question, but it's one that continually has me stumped.
The hardware is a Checkpoint Safe@Office firewall. The default mode of operation is that wired ...
3
votes
1answer
121 views
Dual Cisco Router Stateful Firewall
At my company we have a single Cisco 3925sec/k9 router running BGP with 2 ISPs.
Now we want to purchase a redundant router of the same model to eliminate a single point of failure.
I can set up BGP ...
0
votes
0answers
67 views
Sniffing guest traffic from host with NAT [closed]
I have a Windows XP machine under VirtualBox on which I want to snoop traffic. On the Linux host, I have recompiled Privoxy to allow for full text logging and configured it to prevent gzip ...
1
vote
2answers
91 views
VoIP client permamently losing connection after ISP IP reset
I have a SIP client device connected to my ADSL router, so it is behind a symmetric NAT. My ISP resets the client's IP every 24 hours, it looks like this in the router log:
Mar 26 12:36:56 daemon ...
0
votes
2answers
47 views
NAT from Pvt ip to PublicIP
I have a gateway machine with 2 NIC: eth0 with public IP and eth1 with private IP.
On eth0 I have 4 public IP aliased, I wanted to NAT public IP to private IP and I used DNAT to do that uisng ...
0
votes
1answer
43 views
Restricted cone NAT
If two hosts X and Y are connected to the Internet with NAT.
Both NATs are of cone-restricted type.
Now assume there's a server Z which stores all translated public addresses of X and Y.
Both X and Y ...
