In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

2
votes
1answer
81 views

Trouble with NATing

I'm a networking noob, so sorry for the very generic title. I have the network setup in the following way: A few details about the network: eth0 on all the devices have an in IP in 10.10.10.0 ...
2
votes
1answer
566 views

IPTables Internal Load Balancing

I'm trying to setup a load balancing within the same LAN using IPTables (if possible). My idea is to emulate our main load balancer, but within a virtual environment, all the servers are virtual ...
2
votes
1answer
537 views

Static routes for making hosts on different network accessible

I have a ubuntu router machine with following network settings: br0 192.168.1.15 netmask 255.255.255.0 br0:1 192.168.2.209 netmask 255.255.255.248 I have a pc attached to the br0:1 network with ...
2
votes
3answers
321 views

How can Facebook's session get mixed up because of NAT and/or Proxy

Have received some reports from a customer (a very large company) they reported issues from clients who are using Facebook. These clients claim that once in a while when they log in to Facebook they ...
2
votes
5answers
399 views

problem with NAT in a multiple uplink scenario

I'm trying to configure a linux pc-router that must deal with routing and using NAT to provide connectivity to an internal network (it's also the DHCP server and firewall). In the external side the ...
2
votes
1answer
3k views

How to forward host ports of < 1024 to a VirtualBox NAT-connected machine?

The manual says: "Forwarding host ports < 1024 impossible: On Unix-based hosts (e.g. Linux, Solaris, Mac OS X) it is not possible to bind to ports below 1024 from applications that are not run by ...
2
votes
1answer
1k views

asterisk/freeswitch in nat/no-nat setup

my current setup - i use bunch of sip hard-phones around few offices. all devices have two sip accounts configured - one on internal sip proxy [for calls between the branches], another - at 3rd party ...
2
votes
2answers
4k views

How do you implement NAT-T passthrough on a Juniper SRX series Firewall?

We have 3 juniper SRX-100 firewalls, they are configured like so: FW1 -> FW2 -> INTERNET -> FW3 We would like to create an IPSEC tunnel between FW3 and FW1 passing through FW2 preferably using ...
2
votes
2answers
329 views

Potential double NAT problems in an OS X office

We have a Comcast SMC Business Gateway router/modem combo in our office, and it doesn't provide much in the way of diagnostic tools or QoS routing. I want to plug another router with Tomato installed ...
2
votes
2answers
2k views

Route-Map vs ACL for Cisco NAT

Is there pros and cons of using route-maps vs access-lists for network address translation on a cisco router?
2
votes
3answers
5k views

NAT GRE (IP protocol 47) over Linux router

I have a host that has a permanent static GRE tunnel to a server on the Internet. Right now the host has its own real IP address. I want to put the host behind a Linux box (Smoothwall), and assign it ...
2
votes
2answers
138 views

Trying to connect to servers in a remote lan with softether vpn client and iptables nat ip_forwarding

I have implemented a softether vpn server on one aws server connected to other instances in a LAN. I can ssh into the server with ssh myname@10.0.1.10 without problem. I followed this guide My goal ...
2
votes
2answers
67 views

Exposing private network ip

I have the following setup: Box A eth0 - 192.168.1.101 eth1 - 10.10.2.1 Box B eth0 - 10.10.2.2 Box A has internet access through eth0. I want Box B to be visible on the 192.168.1.0/24 network, so ...
2
votes
1answer
164 views

Stateless NAT with CentOS 6

I'm looking to set up the following: ---[IVR 1] | (internet)----[CentOS box]---+---[IVR 2] | ...
2
votes
1answer
2k views

Proxmox Nat Networking Issue

Definition I have installed Proxmox 3.2 and i am trying to configure a virtual machine as a communication server that handles all traffic and forwards them to the nodes with private ip. I ...
2
votes
1answer
99 views

Routing DHCP traffic over the internet

i'd like to know if it's possible for the internet to be between a DHCP server and the network it's "assigned" to? so basically, something like this: -------------- ------------- ...
2
votes
1answer
4k views

Routing between 2 different subnets on 2 different interfaces in SonicOS

I'm having a bit of a problem allowing traffic between two of my subnets. Here's the structure I've built. The X0 interface has our windows server on it and it handles DHCP/DNS, etc. X1 has the WAN ...
2
votes
1answer
138 views

Can I use NAT64 to route public IPV6 traffic to internal IPV4?

I have a bunch of public IPv6 addresses and some services that run IPv4 only. Can I use NAT64 to connect these services? Is there another solution like a proxy or something?
2
votes
1answer
68 views

Should we accomodate a customer asking us to NAT servers behind new PUBLIC IPs within a VPN?

We're a SaaS provider, setting up a IPSec VPN between our data center and a customer's site so they can directly access their hosted database server from their LAN. Instead of exposing our internal ...
2
votes
1answer
2k views

libvirt and network filtering with nat - iptables overrides

At first, I want to say: I know, it was done initially wrong and I want to avoid doing everything again from the scratch because of general downtime. I am running libvirt/KVM on RHEL. I've got VM ...
2
votes
1answer
3k views

How to set mark on packet when forwarding it in nat prerouting table?

I have a few port forward rules like this iptables -t nat -A PREROUTING -p tcp --dport 46000 -j DNAT --to-destination 172.16.8.2:46000 iptables -A FORWARD -p tcp -d 172.16.8.2 --dport 46000 -j ACCEPT ...
2
votes
1answer
477 views

can't find a way to forward in iptables for specific mac address

I use a linux Centos 6.3 as an Internet gateway with NAT. I want to allow a specific host to have access to Internet, but I don't want to use its IP address since it may get a new IP address from the ...
2
votes
2answers
101 views

Special Routing and NAT requirement

I have a rather special routing and NAT issue which I hope I can fix somehow. Inside my company we run a supernet like 192.168.0.0/21 (192.168.0.1 - 192.168.7.254) All computers have this subnet mask, ...
2
votes
2answers
139 views

NAT, iptables and problematic ports

I am building a small office network with virtual machines. My schema is this: Computer A: gateway, ip 1.1.1.1, iptables used for NAT [eth0=public internet dhcp, dhcp; eth1=gateway] Computer B: ...
2
votes
1answer
108 views

Multiple VMs under VBox, NAT mode, are not responding network requests

I am learning about virtualization. I have been managing real Linux servers for some time but this is the very first time I virtualize, so sorry if I am missing something. My setup is like a ...
2
votes
2answers
797 views

Forwarding MySQL connection with iptables and differents network interfaces

I have a PC with Ubuntu as a router. It has a 3G connection with a public IP to the Internet, and there is a private wireless subnet. So it has two active interfaces: ppp0: public IP (WAN) wlan0: ...
2
votes
2answers
112 views

Port Routing between different domains

i have a apache server located on a.com:9254 I would like to route a.y.com:80 to a.com:9254. So, I can put all my services under y.com domain. I tried proxy. However, In apache, it looks all ...
2
votes
1answer
145 views

Forward port on same machine?

I'm trying to forward an existing port for an application which can only listen on one port. The problem is the program and the firewall is on the same computer (Windows Server 2008 R2). For ...
2
votes
3answers
222 views

ASA: How to connect server with a external IP address already assigned?

Any ideas how this can be done on a ASA? There was a sonicwall in place but it just died and we do not have a replacement besides this ASA. The 24.172.x.132 is a spam filter and I can't change the ...
2
votes
2answers
469 views

Issue NATing server private interface to loopback (for MySQL)

I'm trying to NAT traffic sent to the server's private interface to the loopback (because MySQL bind-address is on 127.0.0.1 and can't be changed but I still need to reach it via the private ...
2
votes
1answer
1k views

kvm, can't access guest from outside host

following ubuntu guide on kvm, I've a test server up and running at this ip address 192.168.0.210 (netmask 255.255.255.0). The virtual machine (same as host ubuntu 11 server) use dhcp but has a ...
2
votes
1answer
115 views

iptables and DNAT. quick question

So I have a machine with a single interface. It has 2 ip addresses (eth0: 192.168.2.3, eth0:1 192.168.2.4). I'd like to take any traffic coming in on 192.168.2.4 and NAT it to an external ip ...
2
votes
1answer
2k views

SNAT through Racoon IPSec VPN

I am trying to route traffic from a device (that I will call "target") connected to my Ubuntu box (that I will call "host") to servers at a remote office. The host uses a Racoon IPSec VPN, connected ...
2
votes
2answers
5k views

How Does VPN Passthrough Actually Work?

I am interested in PPTP passthrough here not Ipsec etc. I have looked on the net but can't find out how it is done. I am an IT administrator myself and know a lot routing, NAT etc. I think I know how ...
2
votes
2answers
717 views

Assigning many WAN IPs to a Linux Router for 1:1 NAT?

I'm in the process of setting up an Ubuntu Linux box to act as a router. Its a fairly normal setup with NATing using IPTables - and its working fine for me. I'm about to put this into production, and ...
2
votes
1answer
385 views

Cisco Small Business: Classless routing vs Classful routing / Class A vs Class C?

Hypothetical topology: Cisco supports the diagram on the left as it relates to the Cisco Small Business WRVS4400N Router. As in, both sides of the WRVS4400N are 192.168.1.*, and the routing is ...
2
votes
3answers
3k views

Cisco ASA 5505 DMZ Setup Issue

I have an ASA 5505 running v8.4. I have one static IP that my ISP gives me and I need to use that for my INSIDE network as well as my DMZ. This becomes a PAT issue as I need some ports to terminate ...
2
votes
3answers
1k views

Openvpn not routing to the internet over a tun interface

I've set up openvpn using tun. I can ping both ways between client & server. But I can't ping from the client to 8.8.4.4 (as a test). I've added nat with: iptables -t nat -A POSTROUTING -o eth0 ...
2
votes
2answers
104 views

Exposing multiple virtual machines to public Internet from laptop on any connection

I've got a couple of Ubuntu virtual servers on my laptop that I drag around with me and use to test configuration and interaction of services like mail, directories, etc. I therefore want to make them ...
2
votes
1answer
1k views

vmware nat internet connection

Host: Windows Server 2008 / VMWare Server 2 Has Internet connection ip: 172.17.62.1 (NAT adapter) no gateway, no dns Guest: Windows Server 2003 ip: 172.17.62.2 (NAT) gateway 172.17.62.5 (set in ...
2
votes
1answer
690 views

Some HTTPS connections via NAT fail, but work on firewall itself

I am having trouble establishing some HTTPS connections from internal machines, even though these same connections work if initiated on the firewall itself. The firewall machine is running Ubuntu ...
2
votes
2answers
4k views

iptables nat: Handle OUTPUT chain via PREROUTING chain / forward from OUTPUT to PREROUTING

I would like to automatically handle packets in the OUTPUT chain of the NAT table (which are generated locally) like if they come from outside (via PREROUTING). Is is possible to use a "forward ...
2
votes
1answer
2k views

Address (url) forwarding with Vyatta

Got this kind of noob question i suppose. I got this very basic network setup and need help to set up some address forwarding. As seen in my illustration below all traffic enters via the eth0 ...
2
votes
3answers
11k views

PPTP pass through on Cisco ASA 5505 (8.2)

Is it possible to setup PPTP VPN traffic (clients outside and server inside) to passthrough a Cisco ASA 5505 if the outside IP address is also being used for PAT? The Cisco examples forward all NAT ...
2
votes
1answer
605 views

NAT: Exposing SQL Server 2008 Express to the internet

I have a Windows Server 2003 SP2 machine with SQL Server 2008 Express installed. I have my network configured with a NAT. Internal clients can access the instance of SQL Server without a problem. I ...
2
votes
3answers
2k views

Unable to ping or access internet

I am setting up a private network. The server is Windows 2008 R2 with DNS installed and has a fixed external IP address. ipconfig outputs the following: PPP adapter RAS (Dial In) Interface: ...
2
votes
1answer
4k views

Iptables and SNAT

I am a newbie to iptables with NAT. My network setup is as shown below linuxbox2 (192.x.y.a) | (194.160.1.1) | linuxbox1(eth1)-------- Switch ...
2
votes
2answers
974 views

SIP and NAT routers?

SIP was not built with NAT routers in mind, and I'd like to get to the bottom of this issue to check what needs to be done on all devices so it works with NAT routers, and understand in what context ...
2
votes
4answers
484 views

JUNOS firewall issues

I am in the process of trying to setup a Juniper SRX240. I have been using the screenOS firewalls for sometime and having some difficulty adjusting.I haven't quickly been able to find a way to do in ...
2
votes
2answers
2k views

How do you have NAT always assign the same IP address in VMWare Fusion?

I currently have 4 virtual machines I've created using out-of-the-box VMWare Fusion on my MacBook Pro. They are all configured with NAT for the networking and therefore get a 192.168.43.xxx IP ...