Hello group, I have one question that is not exactly study problem,
but "real life"(tm) one. 

        A customer has a router (1721) acting as a gateway for his network
to the Internet. His Internet connections is through a wireless connection
and router has two LAN interfaces - Ethernet and FastEthernet. FastEthernet
is connected to the "inside" network, while Ethernet connects to a
"antenna". This router performs both dynamic and static NAT, using
FastEthernet as "inside" and Ethernet as "outside" interface. There is no
special routing in the configuration. The only routing performed is default
route to upstream provider.

        All this is fine and shining... Except that customer would wish to
perform accounting on how much each of his stations is "downloading" (he's
not interested in "upload", i.e. traffic going from him to the outside
world). Using netflow is fine here, except for the NAT part, that makes
things unusable. Data is exported to external host *before* NAT is
performed, so what is written in logs is REMOTE-IP->GLOBAL-NAT-IP, which is
dynamically mapped to internal (statically assigned) IP's.

        Does any of you guys (or ladies) know of a solution how to export
NAT information *after* NAT has been performed (except the obvious: use
another router for NAT in front of this one).

        If more information is required, I'm ready to spend more time in
writing it up.

        Also, if you answer me directly, instead of group, I'd be more than
happy to summarize working solution in the end.

        Thanks in advance.


Kind regards,
Marko.

Tvlvupsstur ~essi er fra Margmiplun hf., Supurlandsbraut 4, Reykjavmk.
Fyrirvara og leipbeiningar til viptakenda tvlvupssts fra Margmiplun hf. er
ap finna a vefsmpunni http://www.mi.is/fyrirvari




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=56803&t=56803
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]

Reply via email to