Hello, One of our partners who wants connect router to router but they run there network based on the 10.0.0.0 network as we do so some NATTing will have top occur. They cannot perform any NAT translation. What I propose is all packets from the external interface from network 10.30.33.0 be translated to 172.21.21.0 and vice Vera. I have two objects up Contractor_Original with ip address 10.30.33.0 mask 255.255.255.0 and Contractor_NAT with ip address 172.21.21.0 mask 255.255.255.0 In the rule base I have allowed both objects to telnet to host, on the NAT Rules I have said Source of Contractor_Original change to Contractor_NAT destination of Contractor_NAT change to Contractor_Original. The packet is accepted by the firewall but NAT does not occur. On the firewall I have a route 10.0.0.0 with mask 255.0.0.0 via Internal interface and 10.30.33.0 with mask of 255.255.255.0 via external interface. local.arp is empty. Any ideas? ******************************************************************************************************* Any opinions expressed in this email are those of the individual and not necessarily of the City Of Salford. This email (and any files transmitted with it) is confidential and solely for the use of the intended recipient. It may contain confidential information or material protected by solicitor-client privilege. If you are not the intended recipient, or the person responsible for delivering to the intended recipient, be advised that you have received this email in error and that any use or onward transmission is strictly prohibited. If you have received this email in error please notify the City of Salford's IT Manager by telephone on +44 (0) 161 793 3993. The City of Salford automatically monitors all incoming email for offensive language, racist and sexist comments. The City of Salford reserves the right to intercept and read such email for audit purposes and where necessary instigate appropriate proceedings. ********************************************************************************************************
|
Hello, One of our partners who wants connect router to router but they run there network based on the 10.0.0.0 network as we do so some NATTing will have top occur. They cannot perform any NAT translation. What I propose is all packets from the external interface from network 10.30.33.0 be translated to 172.21.21.0 and vice Vera. I have two objects up Contractor_Original with ip address 10.30.33.0 mask 255.255.255.0 and Contractor_NAT with ip address 172.21.21.0 mask 255.255.255.0 In the rule base I have allowed both objects to telnet to host, on the NAT Rules I have said Source of Contractor_Original change to Contractor_NAT destination of Contractor_NAT change to Contractor_Original. The packet is accepted by the firewall but NAT does not occur. On the firewall I have a route 10.0.0.0 with mask 255.0.0.0 via Internal interface and 10.30.33.0 with mask of 255.255.255.0 via external interface. local.arp is empty. Any ideas?
|
