In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

5
votes
1answer
778 views

Windows Server 2003 IPSec Tunnel Connected, But Not Working (Possibly NAT/RRAS Related)

Configuration I have setup a "raw" IPSec tunnel between a Windows Server 2003 (SBS) machine and a Netgear FVG318 according to the instructions in Microsoft KB816514. The configuration is as follows ...
4
votes
1answer
247 views

Multi homed firewall with ipnat

i am trying (without success) to configure a ipnat/ipf box under FreeBSD 8.2, here is the scenario: outside inside +----+ ADSL ...
2
votes
1answer
27 views

RRAS Server 2012 R2 Not Assigning Network Info or if it does not passing NAT

I wouldn't bother with this for any other reason than the fact that the speeds I get are worth it. Cable Modem (Bridge mode) - Server 2012 R2 (RRAS) - Linksys EA2700 (Bridged as Switch) My issue is ...
2
votes
1answer
128 views

Stateless NAT with CentOS 6

I'm looking to set up the following: ---[IVR 1] | (internet)----[CentOS box]---+---[IVR 2] | ...
2
votes
1answer
167 views

website not accessible with IIS6 while NAT is configured in Windows 2003

I have Windows2003 server configured with IIS 6. Until now it was working fine, but since I enabled NAT for my users to access the internet via this server, the website becomes unavailable. Note that ...
2
votes
1answer
121 views

OpenVPN tunnel, iptables don't support NAT

I wanted to route my private PCs traffic through my VPS and set up my OpenVPN as fas as necessary but now I have the problem that I can't set iptables, since NAT support is disabled for my server's ...
1
vote
1answer
42 views

DirectAccess: Client receiving icmp error from Ipv6 address

Pardon my naivety but I have never setup DirectAccess before, I've done some research prior and was unable to find a relevant resource. Let me provide a little background and then I'll jump into the ...
1
vote
1answer
28 views

Route new outbound traffic

I am looking for some iptables rules which can help me to route some traffic from a server : Client 1 ----| Client 2 ----| |----------| Client N ----| ssh, ...
1
vote
1answer
35 views

IP forwading amazon ec2 another server IP

I use this command in windows azure (NAT), to redirect all requests to another server with other IP iptables -t nat -A PREROUTING -i eth0 -d 10.240.154.15 -j DNAT --to-destination 192.188.47.63 ¿ ...
1
vote
1answer
241 views

How to forward ports to DMZ using iptables and separate modem

I have a network that looks like this: ADSL VLAN 2 VLAN 3 ------[Modem]----------[firewall]----------[intranet PC] | | ...
0
votes
0answers
180 views

puppetlabs/firewall nat policy issue

I'm using puppetlabs/firewall. I need to create following iptable rules: iptables -A PREROUTING -p tcp -m tcp --dport 443 -j REDIRECT --to-ports 8443 My manifests is firewall { '001 default ...
0
votes
0answers
131 views

Cisco ASA 5505 Access Rules/NAT

I need to allow traffic from any IP to a specific port in an ASA 5505 using ASDM 7.1. I've already created an Access Rule to do this but I ran a Packet Tracer and it gets dropped due to an "implicit ...
0
votes
0answers
28 views

NAT with multiple connections

I have a linux server with 2 WAN connections. It has 2 public IP address as WAN_IP1 and WAN_IP2. The server default gateway is WAN_IP1. The server also has 2 LAN interfaces and the relative subnets. ...
0
votes
0answers
130 views

Cisco ASA 8.2, accessing an internal webserver with an external IP-address together with port translation

We have one web server, let's call it SERVER01. It is running two different web servers that both uses HTTPS, INTERNALAPP on port 443 and EXTERNALAPP on port 444. In a previous setup we had an old ...
0
votes
0answers
164 views

unicast to multicast using Mikrotik

I'm looking for a way to do NAT on a mikrotik router so that a unicast stream received on one interface goes out another interface as Multicast. I've done this on Cisco before, but my company is ...
0
votes
0answers
120 views

ISC DHCP Server - Client Uplink Is Not Working

Running a DHCP server, client(s) does not have up-link (0Mbps) and has a downlink (50Mbps.) I am setting up a gateway/router on a PC running Debian Wheezy with ISC-DHCP. I have 1 WAN (eth0) and 2 LAN ...
0
votes
0answers
146 views

iptables on router: why does nat prerouting not intercept packets?

There is a Debian Wheezy box with OpenVZ kernel (IP 1.1.1.1), working as router between Internet and VPS'es (IPs 1.1.1.100 and 1.1.1.200). Incoming packets addressed directly to VPS'es are normally ...
0
votes
0answers
362 views

Packets are not routed by iptables, how to debug

I'm using OpenStack and OVS. This is my case: From a remote host, I ping VM with IP A. Local gateway received the echo request, then send a packet with IP A and MAC address A' (based on a fixed ...
0
votes
0answers
74 views

Simple MASQUERADE NAT between 2 VM

I'm on a cloud service and I'm trying to set up NAT between two VM. I've never experienced issues in this simple step, but this time is different and I'm near to give up. The first VM had two ...
0
votes
0answers
134 views

Cisco ASA Access anyconnect from inside IPsec tunnel

I have a Cisco ASA on a dynamic WAN IP with a IPsec site-to-site tunnel to a remote linux host in a datacenter with a static WAN IP. All non local traffic is tunneled and the datacenter end is the ...
0
votes
0answers
269 views

Cisco ASA 5505: PAT / NAT between 2 IPSec Tunnels

I've the following Setup: Customer <-> HQ <-> Branchoffice The Customer has a 192.168.1.0/24 subnet. On the HQ only the VPN Gateway is in my context, 172.20.10.1 . And on the Branchoffice ...
0
votes
0answers
139 views

Linux routing: How to allow a device inside private network to connect a public IP over an unknown network?

Consider following network topology: ---------- ---- (my network) ---- | Device 1 | (.101) | 192.168.191.0/24 | ---------- | | ...
0
votes
0answers
153 views

KVM : domain names are resolved, but cannot ping

I've found that in KVM, my networking is acting funny. Oddly (1) I can resolve external internet locations using nslookup or ping , but I cannot actually receive a ping back. (2) I cannot ping ...
0
votes
0answers
440 views

UDP packets are not reaching iptables NAT table

I'm trying to redirect UDP incoming packets to port 4000 to another IP with iptables: iptables -t nat -A PREROUTING -p udp --dport 4000 -j DNAT --to-destination 192.168.100.20 Unfortunately they ...
0
votes
0answers
40 views

Using NAT with iptables between corporate network and firewall'd corporate network

At work we have a firewall between two networks. I was told they opened up the two ports for me but I needed to modify the IPtables to allow packets to go through. I'm not familiar with the correct ...
0
votes
0answers
91 views

Listening “through” GRE Tunnel

Currently I'm looking to learn about using GRE Tunnels and I have the following scheme: Server1 (200.1.2.3) ----> Server2 (190.1.2.3) Both servers have public IPs Then I've setup a GRE Tunnel with ...
0
votes
0answers
388 views

Cisco router: expired translations not timing out

Why would a Cisco router stop removing expired translations from the NAT table? For example: #show ip nat translations tcp verbose tcp <loopback>:60576 <inside>:60576 ...
0
votes
0answers
506 views

Port Forwarding to a VPN Client

I'm looking for some help getting a port forward setup to a VM running Ubuntu 12.04 on my LAN. I can forward the port to the VM successfully and connect to the service over the Internet. But when I ...
0
votes
0answers
76 views

NAT answers instead of remote host

Currently I have VPN client access set up on OpenSuSE 13.1 server to third-party remote Cisco VPN IPSec server. VPN Server is set up to provide access for a host only and to provide access for a local ...
0
votes
0answers
611 views

pfSense NAT routing using VLANs

We already have pfSense installed and it is working for our single IP address on 1.1.1.1. We also have a further 3 ip addresses (1.1.1.2, 1.1.1.3, 1.1.1.4) which are set up as VLANs on the WAN ...
0
votes
0answers
75 views

With split routing configuration returning packets don't reach their sender

I am trying to configure a split routing setup, where all traffic goes out the default eth0 interface, while packets from a single client are routed via tun11 (OpenVPN interface). So far I've come up ...
0
votes
0answers
85 views

Is there an optimal NAT configuration in Cisco IOS for peer to peer applications?

The Cisco router in my organisation is set up to use Port Address Translation (PAT) for Internet connectivity. ie All outbound internet connections are from the ip address or the border Cisco ...
0
votes
0answers
44 views

Impact of iodined settings to server

I would like to install iodined, the IP tunnel via DNS, on a working web server. However, the configuration requires to set IP forwarding add NAT masquerading rules to iptables (and open DNS port) ...
0
votes
0answers
189 views

FreeBSD ipnat(8) rdr - not redirecting

I'm using FreeBSD-10.0-RELEASE: root@fx:~ # uname -a FreeBSD fx.alexus.org 10.0-RELEASE FreeBSD 10.0-RELEASE #0 r260789: Thu Jan 16 22:34:59 UTC 2014 ...
0
votes
0answers
204 views

Load-balancing PPTP connections

I'm trying to load balance two PPTP connections, connected to the same server. I use the following script, but there is no send and receive via PPTP connections. What part am I doing wrong? Are there ...
0
votes
0answers
85 views

Multiple routes and gateways with NAT

My setup is a VM host with two network interfaces where I want to use one as private/internal and the other one as public (which will get a public address on the host), where all the NAT magic to the ...
0
votes
0answers
542 views

Windows Server 2012 R2, multiple Hyper-V Virtual Network Switches for multiple VMs

I want to configure something like this: I have one NIC, and have been given 3 IPs by datacenter, on my server which is running WS2012R2, with 10 VMs on hyper-v. Windows Server 2012 R2 (host) one ...
0
votes
0answers
186 views

Why is an ack response being sent to the wrong gateway?

I was trying to determine why a packet forwarded by iptables to my internal lan is returned on the wrong gateway. Having investigated this further, I determined that, at least in the case of one of ...
0
votes
0answers
59 views

Where can I find the range of IP addresses of my container OpenVZ

I'm looking for the "range of IP addresses of my container"... Where can I find those ? /etc/network/interfaces ? ifconfig ? I don't know and I can't find any answers... I need it for this tutorial ...
0
votes
0answers
186 views

Amazon EC2 Nat Instance - goes out but not back in

I've followed Amazon's steps and list what I've done. I've created 6 subnets (4 private SN1: 10.50.1.0/24, SN2: 10.50.2.0/24, SN3: 10.50.3.0/24, SN4: 10.50.4.0/24) and 2 public (SN5: 10.50.101.0/24 ...
0
votes
0answers
361 views

Socksify TCP connections reaching a gateway IP — preferably without iptables

I have Virtualbox installed on Debian with a few virtual machines. I can't install anything in the guests, and I use host only networking, vboxnet0. The host IP in the host network is 192.168.56.1, ...
0
votes
0answers
232 views

Cisco ASA, Windows Server 08, PPTP/GRE issues

I am at the end of my rope on this one. I am trying to simply forward pptp/gre through a Cisco ASA to my Windows server. Here is what I have done: Access Rules: OUTSIDE ...
0
votes
0answers
334 views

Are my NAT rules in ASA 8.6 correct

I am working on converting some PIX rules to ASA 8.6 syntax. Do the following achieve the goal? Assumptions: outside's IP address is 66.66.66.5/29 The outside IP address I want things translated ...
0
votes
0answers
110 views

Routing static IPs

This is probably a simple question for you experts. I have a BT infinity business broadband account, that offers 5 static IP addresses. I'm trying to expose a server on one of those addresses. This ...
0
votes
0answers
1k views

Cisco 1921 - Using NAT (NVI method) between VRF's slow performance

I'm setting up a Cisco 1921 with two VRF's: one to the internet and one to the LAN. The LAN is in private address space so source address translation needs to happen when the packets leave the ...
0
votes
0answers
117 views

Why NATted packets have different source ip addresses?

I've got ubuntu box with nat. Here is the problem: root@office.redhelper.ru:~# tcpdump -i tap0 host 194.190.8.141 -n tcpdump: verbose output suppressed, use -v or -vv for full protocol decode ...
0
votes
0answers
205 views

set DMZ server on modem that not support DMZ, using port forwarding

I have to see an application server from outside of my network, but the modem that I am using is a Zyxel P-660-HN-T1H that not supports DMZ server configuration.So, which port(s) I should forward to ...
0
votes
0answers
166 views

Multihoming, NAT and ICMP

My router is the default gateway of a LAN and is multihomed. ISP2 is used for HTTP, HTTPS and ISP1, the default gateway of the default routing table, for the rest of the traffic. Similar questions ...
-2
votes
0answers
17 views

Cisco serie 4400 internet configuration with low performance

The issue: I have been trying to set up the network on a cisco router. It is working, however it is very slow. The configuration: Gi0/0/1 is connected to internet (ip 100.38.214.2, gateway is ...
-2
votes
0answers
12 views

Route traffic to internal device on local address for internal clients

There is no DNS server at the site, so the URL is always resolved to an external address on the Firewall. Hence traffic originates on the local network, goes out the firewall and cannot connect to the ...