In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

5
votes
0answers
732 views

Forwarding traffic from TUN device (C++ backend) to the default gateway

The following problem is just a piece of the bigger solution I have a problem with. All other elements seem working so far, so I'll try to describe very small piece which I have problem with. I've ...
4
votes
0answers
401 views

Openstack seems to not map internal IPs to local network properly

I have a very confusing issue which I can't seem to resolve. I followed a guide by Loic Dachary on installing Openstack Folsom on Wheezy, and deployed it on two hosts: a cluster node, and my ...
4
votes
0answers
2k views

NAT64 configuration with tayga on Debian 6

I'm trying to implement NAT64 with tayga on my server and came to a point where I'm not sure how to proceed. My server is connected via one IPv4 address and one /64 IPv6 address block to the ...
4
votes
0answers
906 views

port redirection on solaris 11

I'm trying port forwarding on solaris 11. I have a mechine behind a server that use solaris 11. I try to access that mechine from the external port, and forwarded by solaris 11 mechine to that machine ...
2
votes
0answers
91 views

ASA 5505: How do I access the DMZ web server from the inside using the public IP?

We are using a 5505 ASA Sec+ (8.2). There are three interfaces: inside (172.17.0.0/24), dmz (172.16.0.0/24) and outside (1.2.3.4 for the example). There are static NAT rules set up translating ...
2
votes
0answers
166 views

Apache Instance in Private Subnet not returning packets

How can we get the Apache instance in a private subnet to work? Configuration Public subnet with 1 NAT instance Private subnet with 1 App instance Details 1. Masquerading is turned on NAT on via ...
2
votes
0answers
77 views

Change sender-IP for VM in libvirt behind NAT

I have a server with my own public /28 IPv4 Network. On this server I have some vServers, done with KVM/libvirt. These vServers are connected with a virtual network, NATed to the internet. Every ...
2
votes
0answers
14k views

Openvpn routing for lan to lan through tun

I am trying to setup an OpenVPN tun to connect two lan's The open vpn connection is up and working but there is a problem with my routing or nat or something. What I need is an example of what a ...
2
votes
0answers
302 views

Keepalived failover not working for Static NAT target behind Cisco ASA

I've got a Cisco ASA[0] with a pair of Linux boxes in the DMZ running Keepalived and HAproxy acting as a load-balancing failover pair for another pair of Windows servers, also in the DMZ. I'm ...
2
votes
0answers
225 views

Martian Source & Servers losing network

First off, I am pretty new at diagnosing network issues through linux. I have an intermittent problem with our LAN servers. They seem to lose all connection to the network and if I disable the adapter ...
2
votes
0answers
502 views

NAT not working after enabling DirectAccess

following test setup is given: server1 - 1 network card connected to internal network (10.0.0.2/24) + gateway 10.0.0.1 server2 - 2 network cards (1. connected to internal network (10.0.0.1/24) / 2. ...
2
votes
0answers
170 views

Virtual guest doesn't NAT when using the hosts IP

I am using lxc to host some services. I wish to expose one of these services to the outside world. I have setup three NAT rules on my host using iptables, one for the eth0, one for br0 (the bridge ...
2
votes
0answers
362 views

How to configure opennebula for allowing a cluster private network to host images with public IPs

I am installing open nebula 3.4.1 for running virtual machines a (kvm based) cluster made of 5 computers: a front-end machine having 2 network interfaces and 4 slaves machines with a single network ...
2
votes
0answers
151 views

How can I specify which IP address is used for outbound traffic in OS X Lion Server with multiple WAN IPs?

I have a Mac Mini Server running OS X 10.7.4 (Lion). I am using the ethernet port for the LAN and I have a USB->Ethernet adapter for the WAN. I have assigned two external IPs to the USB->Ethernet ...
2
votes
0answers
570 views

Connectivity issues with dual NIC machine in EC2

I'm trying to get some servers set up in EC2 in a Virtual Private Cloud. To do this, I have two subnets: 10.0.42.0/24 - Public subnet 10.0.83.0/24 - Private subnet To bridge these two, I have a ...
2
votes
0answers
464 views

Oracle Solaris 11, ipnat - rdr not working with remote destinations

I'm trying to reverse proxy traffic coming in on port 8100 at one machine to another. The receiving host is an oracle exclusive zone as is the destination machine. On the incoming zone I have ...
2
votes
0answers
220 views

Two separate WAN uplinks for two different NAT networks

I have a server running ubuntu 10.04 with four interfaces. eth0 and eth1 have static WAN ip's, and eth2 and eth3 are connected to two separate NAT networks 192.168.0.0/24 and 192.168.1.0/24 ...
2
votes
0answers
1k views

Errror on connecting to VPN-server by Demand-dial interface (Windows Server 2008 R2)

I have several LAN-interfaces and internet access over VPN (connect to provider VPN-server). I want to setup NAT from local area networks to internet. For this I install on Windows Server 2008 R2 ...
1
vote
0answers
50 views

pf (Mac OS X) rule to redirect all traffic to a specific ip/port

I'm trying to recreate this iptables setup (from https://github.com/darkk/redsocks) with pf: iptables -t nat -A REDSOCKS -p tcp -d 10.0.0.0/8 -j REDIRECT --to-ports 12345 iptables -t nat -A OUTPUT -p ...
1
vote
0answers
15 views

Dual WAN and NAT on ZyWall

I have Zyxell ZyWall USG-50 router firewall and I want to configure dual WAN navigation. On WAN1 I've 10Mbits connection and on WAN2 I've 100Mbits connection. I want my LAN to navigate with WAN2 and ...
1
vote
0answers
27 views

PFSense NATing to a load balanced server

I apologize for not being able to post the network diagram here but as this is my first time asking a question here I am not allowed. So here is the scenario: We have a site that is build with a ...
1
vote
0answers
30 views

Cisco ASA 5505 no NAT

I have a cisco asa 5505. The outside and inside IPs are private IPs so I do not want to NAT the inside IPs as they go out the Outside interface (there is a router upstream of the ASA 5505. Would I do ...
1
vote
0answers
45 views

Connecting P2P over NAT?

I started to explore the option of connecting with other using a p2p connection, so I coded a simple socket program in JAVA for android devices in which the user in which the users can share simple ...
1
vote
0answers
314 views

AWS yum does not work from private subnet (does work from public)

I have a VPC with a private and a public subnet - each containing an identically built RHEL7 server. I believe the VPC is set up correctly (see following). However, the public server can use yum and ...
1
vote
0answers
47 views

Cisco 5512-x TCP request discarded

We have a fairly basic ACL and NAT rule allowing RDP inbound and NAT'd to a LAN IP (all IPs replaced with IP) object network STATIC-PAT-RDP host IP access-list outside_access_in extended permit ...
1
vote
0answers
58 views

Cisco 1921 router stops routing traffic

I have a cisco 1921 router that recently started acting up. I haven't changed anything on the router in many months because everything was running smoothly, until a week ago. Configuration: The setup ...
1
vote
0answers
51 views

iptables foward to multiple interfaces with NAT

I want to use iptables for provide NAT translation and forward the packets out a different interface. The network set-up is as follows: Alias: eth0:220 with IP address 10.1.1.220 / 255.255.252.0 ...
1
vote
0answers
220 views

Virtual IP Pool for NAT with StrongSwan VPN

I'm trying to wrap my head around a site-to-site VPN configuration using StrongSwan that will allow remote sites to connect to our AWS VPC. The catch is, the remote gateways will potentially be using ...
1
vote
0answers
67 views

iptables keeps using old nat rules

I use iptables snat on my gateway to change local source ip addresses to external. The trouble is that after I change the rules (or even if I flush iptables nat table) gateway keeps using the old rule ...
1
vote
0answers
606 views

Route two public (ISP assigned) subnets on 'outside' interface of Cisco ASA 5510

We've got a Cisco ASA 5510 that sits on our edge and acts as the PPPoE endpoint for a fibre connection. The fibre connection came with a static IP, which is assigned via PPPoE, and gets picked up by ...
1
vote
0answers
144 views

Weird socket behavior in VirtualBox (NAT + PAT)?

I have a Linux VM with NAT and PAT configured. Let's say ports 2000 and 2001 are forwarded to the VM. These ports are also configured for external access on a device such as a router using a domain ...
1
vote
0answers
53 views

Poor large transfers behind NAT on Centos

I have the following set up. A Centos 6.5 VM running on an ESX host, with a public IP4 address. It is acting as a gateway for (a bunch of) other Centos 6.5 VMs that are only connected to a virtual ...
1
vote
0answers
190 views

Firewall and NAT settings in GSM modem for one server

I have a GSM Modem (PSI-MODEM-GSM/ETH) in field with one device behind, acting as a server. The situation is as follows: "PC" | \_________Dynamic IP: 10.103.153.122 | ...
1
vote
0answers
183 views

strongswan packet get natted when ufw is enabled

I'm using strongswan 4.6.4 to connect road warriors to my server (ubuntu 13.10), which is natted behind a firewall. left=%defaultroute leftsubnet=10.10.1.0/24 right=%any ...
1
vote
0answers
81 views

OpenVPN running on Internet Gateway, so all private clients can access VPN with no config

Our LAN connects to our office gateway machine (192.168.1.1), which is connected to the Internet. I have setup NAT/Masquerading for this purpose with no issue. We also use OpenVPN to connect to our ...
1
vote
0answers
244 views

Simulating a client behind a NAT in Virtual Box

I am trying to simulate a client behind a NAT using Virtual Box. I have a host machine let's say with an IP address 130.0.0.1. I create a virtual machine (let's call it VM1) running Ubuntu 12.04 with ...
1
vote
0answers
135 views

Port corruption using iptables NAT on Enterprise Linux 6

I am trying to setup a captive web portal redirect on CentOS using the following configuration: This configuration works for the first few packets, but then suddenly the destination port is corrupted ...
1
vote
0answers
97 views

VmWare : listening nat in promiscuous mode

This document describe how NAT in VmWare works. Next picture is from that document. Is there way to configure Virtual Ethernet switch in that way: All packets arrived from nat send to specified ...
1
vote
0answers
51 views

Zyxell USG200 NAT for local computer using wan address

My WAN public address is linked to the server with NAT. How can I set up the firewall to let all local computer use the same NAT rules for www.mypublicaddress.com address from INSIDE the network? I ...
1
vote
0answers
87 views

Linux iptables NAT

So I need to setup a server that servers a NAT server for IPMI network xxx.xxx.xxx.xxx = external IP(internet IP) aaa.aaa.aaa.aaa = internal IP A bbb.bbb.bbb.bbb = internal IP B User 1 -> ...
1
vote
0answers
271 views

OpenStack Server Instances have internet access, but they are unable to access the internal network

I'm running an OpenStack Grizzly release with a Nova-Network configuration. [No Quantium]. My network is setup as follows: OpenStack Box (10.10.13.xx network)->OpenStack Internal Network ...
1
vote
0answers
1k views

Puppet agent (v3.0.1) hangs connecting to master (v3.1.1) in VM behind firewall (with NAT based access)

I am using puppet agent v3.0.1 (On FreeBSD), trying to connect to a puppet master v3.1.1 (On Ubuntu) and the puppet agent hangs with the following debug output: puppet agent --debug --no-daemonize ...
1
vote
0answers
704 views

NAT Pooling with IPSEC source int on Fortinet 60c

I've been working on this one for a while, and been trying to figgure it out but now I've been banging my head against the wall.. We have the following setup: Fortinet 60c configured with these ...
1
vote
0answers
56 views

Nat Traversal, peers unable to communicate

I'm currently working on a project that requires NAT traversal but I seem to be running into difficulty. I have the following setup running for testing: R1, Verizon Fios router connected to the ...
1
vote
0answers
98 views

NAT Public ip to that many number of pvt ip

i have a Linux box with two interfaces one with ip 10.10.18.2 and other with ip 192.168.1.2,192.168.1.3 aliased. A xen host is connected with ip 10.10.18.3 and gateway 10.10.18.2 to this through a ...
1
vote
0answers
740 views

How does one configure UFW to allow private DNS requests, but block DNS requests from internet

I have an Ubuntu Server 12.04, with two network cards: eth0 is connected to the internet eth1 is connected to a private network (192.168.10.1) The server is configured as a gateway and hosts DNS ...
1
vote
0answers
201 views

Cloudmin GPL Xen PV with Nat Port Forwarding

I'm running Cloudmin GPL on CentOS 5 64bit and am trying to allow my Xen PV guest to access the internet via a NAT/port forwarding setup.. I've done the following: (on dom0) echo "1" > ...
1
vote
0answers
423 views

NAT loopback/reflection on Zyxel P-661HW-D1 doesn't work

I have a Zyxel P-661HW-D1 modem/router with several port forwards that works on the WAN interface. I'd like to make them work for the LAN interface as well, like I'm used to. I updated the firmware to ...
1
vote
0answers
529 views

VirtualBox - multiple guests, each with a single bridged adapter?

I am running a dedicated server (located at Hetzner, Germany) that runs VirtualBox in order to virtualize several services accross multiple virtual guests. Those guests are supposed to communicate ...
1
vote
0answers
137 views

Changing externally visible IP on a multi-IP router?

I work at a public library and I'm trying to configure OCLC's EzProxy software. I've run into a problem and I think it's related to our network config. I'm punching above my weight here a little so ...