In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

5
votes
1answer
782 views

Windows Server 2003 IPSec Tunnel Connected, But Not Working (Possibly NAT/RRAS Related)

Configuration I have setup a "raw" IPSec tunnel between a Windows Server 2003 (SBS) machine and a Netgear FVG318 according to the instructions in Microsoft KB816514. The configuration is as follows ...
4
votes
1answer
251 views

Multi homed firewall with ipnat

i am trying (without success) to configure a ipnat/ipf box under FreeBSD 8.2, here is the scenario: outside inside +----+ ADSL ...
2
votes
1answer
171 views

website not accessible with IIS6 while NAT is configured in Windows 2003

I have Windows2003 server configured with IIS 6. Until now it was working fine, but since I enabled NAT for my users to access the internet via this server, the website becomes unavailable. Note that ...
2
votes
1answer
121 views

OpenVPN tunnel, iptables don't support NAT

I wanted to route my private PCs traffic through my VPS and set up my OpenVPN as fas as necessary but now I have the problem that I can't set iptables, since NAT support is disabled for my server's ...
1
vote
1answer
72 views

DirectAccess: Client receiving icmp error from Ipv6 address

Pardon my naivety but I have never setup DirectAccess before, I've done some research prior and was unable to find a relevant resource. Let me provide a little background and then I'll jump into the ...
1
vote
1answer
28 views

Route new outbound traffic

I am looking for some iptables rules which can help me to route some traffic from a server : Client 1 ----| Client 2 ----| |----------| Client N ----| ssh, ...
0
votes
0answers
53 views

NAT with port forwarding on same interface

I have some issues with the port forwarding on same interface. I have server1 with the public IP 5.1.1.1 and one company publish a MySQL database with IP 10.1.1.1 through VPN reached only by server1. ...
0
votes
0answers
99 views

How to use linux repository for setup (ubuntu) when box are in aws scenario 2 wizard created private subnet?

I know lots of questions and I have personally tried manual VPC creation multiple times until I gave to the wizard (NAT concept wouldn't stick). I thought the wizard would actually configure ...
0
votes
0answers
119 views

NAT Traffic via my instance in Microsoft Azure

I'm working in Azure IaaS Environment I have a private network 172.16.0.0/16 in which I have few linux instances running (172.16.0.1-5) My instances are accessing the public internet on port 80 (so my ...
0
votes
0answers
188 views

How can I allow NAT from inside to outside and vise-versa when each of my clients will have only one static public IP using an ASA5525-X?

My network topology is pretty basic. My data center provides a router and added a switch just before my cage to provide connectivity to all of the racks. My rack takes the copper drop they provide and ...
0
votes
0answers
44 views

Cisco ASA5505 Public IP Address

I am trying to configure a Cisco ASA5505. I am using the GUI start up wizard. When I assign the outside IP address to be a public IP address the configuration will work but after about 30 seconds the ...
0
votes
0answers
53 views

How to fix stalled connection on large download

I have a cisco 1921 router performing routing and NAT function. Cisco 3750 is performing layer 3 core switching duties. Users are complaining about large file transfers being stalled (not dropped) ...
0
votes
0answers
194 views

puppetlabs/firewall nat policy issue

I'm using puppetlabs/firewall. I need to create following iptable rules: iptables -A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443 My manifests is firewall { '001 default ...
0
votes
0answers
136 views

Cisco ASA 5505 Access Rules/NAT

I need to allow traffic from any IP to a specific port in an ASA 5505 using ASDM 7.1. I've already created an Access Rule to do this but I ran a Packet Tracer and it gets dropped due to an "implicit ...
0
votes
0answers
28 views

NAT with multiple connections

I have a linux server with 2 WAN connections. It has 2 public IP address as WAN_IP1 and WAN_IP2. The server default gateway is WAN_IP1. The server also has 2 LAN interfaces and the relative subnets. ...
0
votes
0answers
135 views

Cisco ASA 8.2, accessing an internal webserver with an external IP-address together with port translation

We have one web server, let's call it SERVER01. It is running two different web servers that both uses HTTPS, INTERNALAPP on port 443 and EXTERNALAPP on port 444. In a previous setup we had an old ...
0
votes
0answers
171 views

unicast to multicast using Mikrotik

I'm looking for a way to do NAT on a mikrotik router so that a unicast stream received on one interface goes out another interface as Multicast. I've done this on Cisco before, but my company is ...
0
votes
0answers
123 views

ISC DHCP Server - Client Uplink Is Not Working

Running a DHCP server, client(s) does not have up-link (0Mbps) and has a downlink (50Mbps.) I am setting up a gateway/router on a PC running Debian Wheezy with ISC-DHCP. I have 1 WAN (eth0) and 2 LAN ...
0
votes
0answers
148 views

iptables on router: why does nat prerouting not intercept packets?

There is a Debian Wheezy box with OpenVZ kernel (IP 1.1.1.1), working as router between Internet and VPS'es (IPs 1.1.1.100 and 1.1.1.200). Incoming packets addressed directly to VPS'es are normally ...
0
votes
0answers
392 views

Packets are not routed by iptables, how to debug

I'm using OpenStack and OVS. This is my case: From a remote host, I ping VM with IP A. Local gateway received the echo request, then send a packet with IP A and MAC address A' (based on a fixed ...
0
votes
0answers
76 views

Simple MASQUERADE NAT between 2 VM

I'm on a cloud service and I'm trying to set up NAT between two VM. I've never experienced issues in this simple step, but this time is different and I'm near to give up. The first VM had two ...
0
votes
0answers
137 views

Cisco ASA Access anyconnect from inside IPsec tunnel

I have a Cisco ASA on a dynamic WAN IP with a IPsec site-to-site tunnel to a remote linux host in a datacenter with a static WAN IP. All non local traffic is tunneled and the datacenter end is the ...
0
votes
0answers
272 views

Cisco ASA 5505: PAT / NAT between 2 IPSec Tunnels

I've the following Setup: Customer <-> HQ <-> Branchoffice The Customer has a 192.168.1.0/24 subnet. On the HQ only the VPN Gateway is in my context, 172.20.10.1 . And on the Branchoffice ...
0
votes
0answers
141 views

Linux routing: How to allow a device inside private network to connect a public IP over an unknown network?

Consider following network topology: ---------- ---- (my network) ---- | Device 1 | (.101) | 192.168.191.0/24 | ---------- | | ...
0
votes
0answers
157 views

KVM : domain names are resolved, but cannot ping

I've found that in KVM, my networking is acting funny. Oddly (1) I can resolve external internet locations using nslookup or ping , but I cannot actually receive a ping back. (2) I cannot ping ...
0
votes
0answers
452 views

UDP packets are not reaching iptables NAT table

I'm trying to redirect UDP incoming packets to port 4000 to another IP with iptables: iptables -t nat -A PREROUTING -p udp --dport 4000 -j DNAT --to-destination 192.168.100.20 Unfortunately they ...
0
votes
0answers
40 views

Using NAT with iptables between corporate network and firewall'd corporate network

At work we have a firewall between two networks. I was told they opened up the two ports for me but I needed to modify the IPtables to allow packets to go through. I'm not familiar with the correct ...
0
votes
0answers
92 views

Listening “through” GRE Tunnel

Currently I'm looking to learn about using GRE Tunnels and I have the following scheme: Server1 (200.1.2.3) ----> Server2 (190.1.2.3) Both servers have public IPs Then I've setup a GRE Tunnel with ...
0
votes
0answers
405 views

Cisco router: expired translations not timing out

Why would a Cisco router stop removing expired translations from the NAT table? For example: #show ip nat translations tcp verbose tcp <loopback>:60576 <inside>:60576 ...
0
votes
0answers
510 views

Port Forwarding to a VPN Client

I'm looking for some help getting a port forward setup to a VM running Ubuntu 12.04 on my LAN. I can forward the port to the VM successfully and connect to the service over the Internet. But when I ...
0
votes
0answers
79 views

NAT answers instead of remote host

Currently I have VPN client access set up on OpenSuSE 13.1 server to third-party remote Cisco VPN IPSec server. VPN Server is set up to provide access for a host only and to provide access for a local ...
0
votes
0answers
635 views

pfSense NAT routing using VLANs

We already have pfSense installed and it is working for our single IP address on 1.1.1.1. We also have a further 3 ip addresses (1.1.1.2, 1.1.1.3, 1.1.1.4) which are set up as VLANs on the WAN ...
0
votes
0answers
195 views

FreeBSD ipnat(8) rdr - not redirecting

I'm using FreeBSD-10.0-RELEASE: root@fx:~ # uname -a FreeBSD fx.alexus.org 10.0-RELEASE FreeBSD 10.0-RELEASE #0 r260789: Thu Jan 16 22:34:59 UTC 2014 ...
0
votes
0answers
208 views

Load-balancing PPTP connections

I'm trying to load balance two PPTP connections, connected to the same server. I use the following script, but there is no send and receive via PPTP connections. What part am I doing wrong? Are there ...
0
votes
0answers
85 views

Multiple routes and gateways with NAT

My setup is a VM host with two network interfaces where I want to use one as private/internal and the other one as public (which will get a public address on the host), where all the NAT magic to the ...
0
votes
0answers
543 views

Windows Server 2012 R2, multiple Hyper-V Virtual Network Switches for multiple VMs

I want to configure something like this: I have one NIC, and have been given 3 IPs by datacenter, on my server which is running WS2012R2, with 10 VMs on hyper-v. Windows Server 2012 R2 (host) one ...
0
votes
0answers
192 views

Why is an ack response being sent to the wrong gateway?

I was trying to determine why a packet forwarded by iptables to my internal lan is returned on the wrong gateway. Having investigated this further, I determined that, at least in the case of one of ...
0
votes
0answers
59 views

Where can I find the range of IP addresses of my container OpenVZ

I'm looking for the "range of IP addresses of my container"... Where can I find those ? /etc/network/interfaces ? ifconfig ? I don't know and I can't find any answers... I need it for this tutorial ...
0
votes
0answers
192 views

Amazon EC2 Nat Instance - goes out but not back in

I've followed Amazon's steps and list what I've done. I've created 6 subnets (4 private SN1: 10.50.1.0/24, SN2: 10.50.2.0/24, SN3: 10.50.3.0/24, SN4: 10.50.4.0/24) and 2 public (SN5: 10.50.101.0/24 ...
0
votes
0answers
370 views

Socksify TCP connections reaching a gateway IP — preferably without iptables

I have Virtualbox installed on Debian with a few virtual machines. I can't install anything in the guests, and I use host only networking, vboxnet0. The host IP in the host network is 192.168.56.1, ...
0
votes
0answers
233 views

Cisco ASA, Windows Server 08, PPTP/GRE issues

I am at the end of my rope on this one. I am trying to simply forward pptp/gre through a Cisco ASA to my Windows server. Here is what I have done: Access Rules: OUTSIDE ...
0
votes
0answers
335 views

Are my NAT rules in ASA 8.6 correct

I am working on converting some PIX rules to ASA 8.6 syntax. Do the following achieve the goal? Assumptions: outside's IP address is 66.66.66.5/29 The outside IP address I want things translated ...
0
votes
0answers
112 views

Routing static IPs

This is probably a simple question for you experts. I have a BT infinity business broadband account, that offers 5 static IP addresses. I'm trying to expose a server on one of those addresses. This ...
0
votes
0answers
1k views

Cisco 1921 - Using NAT (NVI method) between VRF's slow performance

I'm setting up a Cisco 1921 with two VRF's: one to the internet and one to the LAN. The LAN is in private address space so source address translation needs to happen when the packets leave the ...
0
votes
0answers
117 views

Why NATted packets have different source ip addresses?

I've got ubuntu box with nat. Here is the problem: root@office.redhelper.ru:~# tcpdump -i tap0 host 194.190.8.141 -n tcpdump: verbose output suppressed, use -v or -vv for full protocol decode ...
0
votes
0answers
209 views

set DMZ server on modem that not support DMZ, using port forwarding

I have to see an application server from outside of my network, but the modem that I am using is a Zyxel P-660-HN-T1H that not supports DMZ server configuration.So, which port(s) I should forward to ...
0
votes
0answers
168 views

Multihoming, NAT and ICMP

My router is the default gateway of a LAN and is multihomed. ISP2 is used for HTTP, HTTPS and ISP1, the default gateway of the default routing table, for the rest of the traffic. Similar questions ...
-1
votes
0answers
21 views

smartos route between zones through external ip

I have three zones - nginx(reverse proxy), jetty(webserver), and curl. I want to reach jetty from curl through nginx. When I do curl from external ip I could reach jetty through nginx, but not from ...
-2
votes
0answers
29 views

Cisco serie 4400 internet configuration with low performance

The issue: I have been trying to set up the network on a cisco router. It is working, however it is very slow. The configuration: Gi0/0/1 is connected to internet (ip 100.38.214.2, gateway is ...
-2
votes
0answers
12 views

Route traffic to internal device on local address for internal clients

There is no DNS server at the site, so the URL is always resolved to an external address on the Firewall. Hence traffic originates on the local network, goes out the firewall and cannot connect to the ...