In computer networking, network address translation (NAT) is the process of modifying network address information in datagram (IP) packet headers while in transit across a traffic routing device for the purpose of remapping one IP address space into another.

learn more… | top users | synonyms

4
votes
0answers
2k views

NAT64 configuration with tayga on Debian 6

I'm trying to implement NAT64 with tayga on my server and came to a point where I'm not sure how to proceed. My server is connected via one IPv4 address and one /64 IPv6 address block to the internet....
4
votes
0answers
1k views

port redirection on solaris 11

I'm trying port forwarding on solaris 11. I have a mechine behind a server that use solaris 11. I try to access that mechine from the external port, and forwarded by solaris 11 mechine to that machine ...
3
votes
0answers
706 views

ASA 5505: How do I access the DMZ web server from the inside using the public IP?

We are using a 5505 ASA Sec+ (8.2). There are three interfaces: inside (172.17.0.0/24), dmz (172.16.0.0/24) and outside (1.2.3.4 for the example). There are static NAT rules set up translating 1.2.3....
3
votes
0answers
535 views

Openstack seems to not map internal IPs to local network properly

I have a very confusing issue which I can't seem to resolve. I followed a guide by Loic Dachary on installing Openstack Folsom on Wheezy, and deployed it on two hosts: a cluster node, and my ...
3
votes
0answers
553 views

Oracle Solaris 11, ipnat - rdr not working with remote destinations

I'm trying to reverse proxy traffic coming in on port 8100 at one machine to another. The receiving host is an oracle exclusive zone as is the destination machine. On the incoming zone I have ...
2
votes
0answers
38 views

IPTables DNAT Exemption

TL;DR - I'm looking for a way to send all my external traffic through a proxy server but not send all my internal traffic through a proxy server. How can I achieve this? My end goal is to forward ...
2
votes
0answers
198 views

Apache Instance in Private Subnet not returning packets

How can we get the Apache instance in a private subnet to work? Configuration Public subnet with 1 NAT instance Private subnet with 1 App instance Details 1. Masquerading is turned on NAT on via ...
2
votes
0answers
88 views

Change sender-IP for VM in libvirt behind NAT

I have a server with my own public /28 IPv4 Network. On this server I have some vServers, done with KVM/libvirt. These vServers are connected with a virtual network, NATed to the internet. Every ...
2
votes
0answers
385 views

Keepalived failover not working for Static NAT target behind Cisco ASA

I've got a Cisco ASA[0] with a pair of Linux boxes in the DMZ running Keepalived and HAproxy acting as a load-balancing failover pair for another pair of Windows servers, also in the DMZ. I'm ...
2
votes
0answers
276 views

Martian Source & Servers losing network

First off, I am pretty new at diagnosing network issues through linux. I have an intermittent problem with our LAN servers. They seem to lose all connection to the network and if I disable the adapter ...
2
votes
0answers
665 views

NAT not working after enabling DirectAccess

following test setup is given: server1 - 1 network card connected to internal network (10.0.0.2/24) + gateway 10.0.0.1 server2 - 2 network cards (1. connected to internal network (10.0.0.1/24) / 2. ...
2
votes
0answers
177 views

Virtual guest doesn't NAT when using the hosts IP

I am using lxc to host some services. I wish to expose one of these services to the outside world. I have setup three NAT rules on my host using iptables, one for the eth0, one for br0 (the bridge ...
2
votes
0answers
434 views

How to configure opennebula for allowing a cluster private network to host images with public IPs

I am installing open nebula 3.4.1 for running virtual machines a (kvm based) cluster made of 5 computers: a front-end machine having 2 network interfaces and 4 slaves machines with a single network ...
2
votes
0answers
158 views

How can I specify which IP address is used for outbound traffic in OS X Lion Server with multiple WAN IPs?

I have a Mac Mini Server running OS X 10.7.4 (Lion). I am using the ethernet port for the LAN and I have a USB->Ethernet adapter for the WAN. I have assigned two external IPs to the USB->Ethernet (...
2
votes
0answers
587 views

Connectivity issues with dual NIC machine in EC2

I'm trying to get some servers set up in EC2 in a Virtual Private Cloud. To do this, I have two subnets: 10.0.42.0/24 - Public subnet 10.0.83.0/24 - Private subnet To bridge these two, I have a ...
2
votes
0answers
233 views

Two separate WAN uplinks for two different NAT networks

I have a server running ubuntu 10.04 with four interfaces. eth0 and eth1 have static WAN ip's, and eth2 and eth3 are connected to two separate NAT networks 192.168.0.0/24 and 192.168.1.0/24 ...
2
votes
0answers
2k views

Errror on connecting to VPN-server by Demand-dial interface (Windows Server 2008 R2)

I have several LAN-interfaces and internet access over VPN (connect to provider VPN-server). I want to setup NAT from local area networks to internet. For this I install on Windows Server 2008 R2 ...
1
vote
0answers
35 views

cisco asa public server nat issue

I have been tasked with some ASA configuration coming in a few weeks, and to test out some configuration options I have setup a web server on my local network which I would like to be able to access ...
1
vote
0answers
140 views

Linphone iOS behind CGNAT sets wrong Contact Header

We are using Linphone client on iOS over Verizon network. Our client sends wrong IP address on Contact header at 200 OK message as a response to INVITE message from Asterisk. SIP trace Our client's ...
1
vote
0answers
25 views

IPsec: hide private IP behind Gateway IP

I have an IPsec Gateway to a customer, and the VPN tunnel is up, the problem is that they don't allow me to use my private address because it used by another VPN they use. Our gateway is an EC2 ...
1
vote
0answers
61 views

Proper NAT/routing configuration for device-wide iON VPN (using NETunnelProviderManager)

I am trying to set up a VPN server environment to work with the test program provided by Apple called SimpleTunneler, which uses NETUnnelProviderManager introduced in iOS 9.0. For the server portion I ...
1
vote
0answers
48 views

iptables/nat/prerouting ignores UDP packets?

The same effect on many servers with various kernel versions. There are multiple Iptables DNAT rules: iptables -t nat -A PREROUTING -i eth0 -p tcp --dport 12345 -j DNAT --to-destination 10.20.30....
1
vote
0answers
118 views

What's your experience with the AWS NAT Gateway performance?

In December/2015 Amazon launched their VPC NAT Gateway service which is basically a managed alternative to creating your own (and it looks very good in comparison to NAT instances). I was just about ...
1
vote
0answers
97 views

RRAS IKEv2 Behind Router

I have an installation of Server 2012 R2 running that I need to deploy an IKEv2 VPN on. It's my way of accessing files at my office. The current setup involves a NAT Router (Just a standard ISP-...
1
vote
0answers
40 views

Couchbase XDCR through proxy or NAT

I am trying to set up two clusters of Couchbase with XDCR, one in AWS and one in our client's enterprise network. Normally, for each cluster, I would set up each node using its private IP. But, in ...
1
vote
0answers
155 views

Routing public IP addresses to customers in a WISP setup

We have a fibre leaseline with a /29 range for our pfSense WAN port 61.179.145.40/29 So the WAN of our pfSense box is 61.179.145.42 with a gateway of 61.179.145.41. Our ISP has also routed 61.179....
1
vote
0answers
30 views

ubuntu router intermittently times out

I have an ubuntu 14.04 server working as an internet gateway/router. When I run a continuous ping against a known good address on the internet, I get steady reply with good latency. But sometimes when ...
1
vote
0answers
84 views

Unable to connect to web server hosted in private subnet of VPC via NAT hosted in public subnet

I have hosted my android/web application on a EC2 instance in the private subnet (10.0.1.0) of my VPC. This instance has apache-tomcat installed on it, but does not have a public IP. I also have a ...
1
vote
0answers
25 views

Vyatta Nat Rule Help Translating From Cisco ASA Rule

I'm fairly new to Vyatta and need advice on how to translate the following rule example from a Cisco ASA to the Vyatta. static (dmz2,outside) 192.168.254.0 192.168.254.0 netmask/24 How do I ...
1
vote
0answers
142 views

tcp previous segment not captured when NAT

I have a client request web service on a server behide NAT. My client IP is 10.54.10.193 NAT address: 10.54.28.183 Server address: 62.209.39.203 When client request web service on server we have TCP ...
1
vote
0answers
110 views

Dual WAN and NAT on ZyWall

I have Zyxell ZyWall USG-50 router firewall and I want to configure dual WAN navigation. On WAN1 I've 10Mbits connection and on WAN2 I've 100Mbits connection. I want my LAN to navigate with WAN2 and I'...
1
vote
0answers
109 views

PFSense NATing to a load balanced server

I apologize for not being able to post the network diagram here but as this is my first time asking a question here I am not allowed. So here is the scenario: We have a site that is build with a ...
1
vote
0answers
112 views

Cisco ASA 5505 no NAT

I have a cisco asa 5505. The outside and inside IPs are private IPs so I do not want to NAT the inside IPs as they go out the Outside interface (there is a router upstream of the ASA 5505. Would I do ...
1
vote
0answers
117 views

Connecting P2P over NAT?

I started to explore the option of connecting with other using a p2p connection, so I coded a simple socket program in JAVA for android devices in which the user in which the users can share simple ...
1
vote
0answers
237 views

Cisco 5512-x TCP request discarded

We have a fairly basic ACL and NAT rule allowing RDP inbound and NAT'd to a LAN IP (all IPs replaced with IP) object network STATIC-PAT-RDP host IP access-list outside_access_in extended permit ...
1
vote
0answers
133 views

Cisco 1921 router stops routing traffic

I have a cisco 1921 router that recently started acting up. I haven't changed anything on the router in many months because everything was running smoothly, until a week ago. Configuration: The setup ...
1
vote
0answers
84 views

iptables foward to multiple interfaces with NAT

I want to use iptables for provide NAT translation and forward the packets out a different interface. The network set-up is as follows: Alias: eth0:220 with IP address 10.1.1.220 / 255.255.252.0 ...
1
vote
0answers
515 views

Virtual IP Pool for NAT with StrongSwan VPN

I'm trying to wrap my head around a site-to-site VPN configuration using StrongSwan that will allow remote sites to connect to our AWS VPC. The catch is, the remote gateways will potentially be using ...
1
vote
0answers
2k views

can't connect aws VPC private instance to internet through NAT

trying to install a LAMP stack on an aws instance in a VPC private subnet using Scenario 2 described here: http://docs.aws.amazon.com/AmazonVPC/latest/UserGuide/VPC_Scenario2.html I've set everything ...
1
vote
0answers
92 views

iptables keeps using old nat rules

I use iptables snat on my gateway to change local source ip addresses to external. The trouble is that after I change the rules (or even if I flush iptables nat table) gateway keeps using the old rule ...
1
vote
0answers
899 views

FortiGate 310B public ip pool into internal port

I have a FortiGate 310B with WAN port with /27 public IP pool from the ISP. The WAN port is configured with primary IP 1.1.1.1/27 I would like to provide servers within the Internal port a public IP. ...
1
vote
0answers
217 views

Should a NAT host be separate from a Bastion host

Have a private network with servers that required SSH access. Since the instances are in a private subnet, they cannot be accessed directly via SSH and require a public Bastion host to access. ...
1
vote
0answers
805 views

Route two public (ISP assigned) subnets on 'outside' interface of Cisco ASA 5510

We've got a Cisco ASA 5510 that sits on our edge and acts as the PPPoE endpoint for a fibre connection. The fibre connection came with a static IP, which is assigned via PPPoE, and gets picked up by ...
1
vote
0answers
198 views

Weird socket behavior in VirtualBox (NAT + PAT)?

I have a Linux VM with NAT and PAT configured. Let's say ports 2000 and 2001 are forwarded to the VM. These ports are also configured for external access on a device such as a router using a domain ...
1
vote
0answers
53 views

Poor large transfers behind NAT on Centos

I have the following set up. A Centos 6.5 VM running on an ESX host, with a public IP4 address. It is acting as a gateway for (a bunch of) other Centos 6.5 VMs that are only connected to a virtual ...
1
vote
0answers
267 views

Firewall and NAT settings in GSM modem for one server

I have a GSM Modem (PSI-MODEM-GSM/ETH) in field with one device behind, acting as a server. The situation is as follows: "PC" | \_________Dynamic IP: 10.103.153.122 | ...
1
vote
0answers
284 views

strongswan packet get natted when ufw is enabled

I'm using strongswan 4.6.4 to connect road warriors to my server (ubuntu 13.10), which is natted behind a firewall. left=%defaultroute leftsubnet=10.10.1.0/24 right=%any rightsubnet=...
1
vote
0answers
307 views

Simulating a client behind a NAT in Virtual Box

I am trying to simulate a client behind a NAT using Virtual Box. I have a host machine let's say with an IP address 130.0.0.1. I create a virtual machine (let's call it VM1) running Ubuntu 12.04 with ...
1
vote
0answers
181 views

Port corruption using iptables NAT on Enterprise Linux 6

I am trying to setup a captive web portal redirect on CentOS using the following configuration: This configuration works for the first few packets, but then suddenly the destination port is corrupted ...
1
vote
0answers
123 views

VmWare : listening nat in promiscuous mode

This document describe how NAT in VmWare works. Next picture is from that document. Is there way to configure Virtual Ethernet switch in that way: All packets arrived from nat send to specified ...