Options

NAT Help

MinationMination Member Posts: 3 ■□□□□□□□□□
Hi All, I have setup "Many to one NAT or PAT"

I have got it working and understand what it is doing

I have the following set

HostA 192.168.101.2
HostB 192.168.100.2
R1 E0 192.168.101.1, S0 192.168.1.1
R2 E0 192.168.100.1, S0 192.168.1.2

HostA
R1
R2
HostB

I am doing the nat on R1 Serial interface.

I do a ping from HostA to HostB (works)

Then I drop into R1 and do a "sh ip nat trans" and get this

Inside global Inside local Outside local Outside global
icmp192.168.1.1:9392 192.168.101.2:9392 192.168.100.1:9392 192.168.100.1:9392
icmp192.168.1.1:9393 192.168.101.2:9393 192.168.100.1:9393 192.168.100.1:9393
icmp192.168.1.1:9394 192.168.101.2:9394 192.168.100.1:9394 192.168.100.1:9394
icmp192.168.1.1:9395 192.168.101.2:9395 192.168.100.1:9395 192.168.100.1:9395
icmp192.168.1.1:9396 192.168.101.2:9396 192.168.100.1:9396 192.168.100.1:9396


icmp192.168.1.1:9392 192.168.101.2:9392 192.168.100.2:9392 192.168.100.2:9392
icmp192.168.1.1:9393 192.168.101.2:9393 192.168.100.2:9393 192.168.100.2:9393
icmp192.168.1.1:9394 192.168.101.2:9394 192.168.100.2:9394 192.168.100.2:9394
icmp192.168.1.1:9395 192.168.101.2:9395 192.168.100.2:9395 192.168.100.2:9395
icmp192.168.1.1:9396 192.168.101.2:9396 192.168.100.2:9396 192.168.100.2:9396


icmp192.168.1.1:9392 192.168.101.2:9392 192.168.1.2:9392 192.168.1.2:9392
icmp192.168.1.1:9393 192.168.101.2:9393 192.168.1.2:9393 192.168.1.2:9393
icmp192.168.1.1:9394 192.168.101.2:9394 192.168.1.2:9394 192.168.1.2:9394
icmp192.168.1.1:9395 192.168.101.2:9395 192.168.1.2:9395 192.168.1.2:9395
icmp192.168.1.1:9396 192.168.101.2:9396 192.168.1.2:9396 192.168.1.2:9396

I can see the first part, i.e going from Inside Local to inside global....then I am lost. I can't seem to understand what the Outside global/local is doing.

If you can't answer this, no worries or just a link to a site (not cisco iv'e looked at theres and thought that made sence).

Sorry about the formatting, I tried to make it better.

Thanks alot!

Min

Comments

  • Options
    SVSV Member Posts: 166
    Inside local address - The IP address assigned to a host on the inside network. This is the address configured as a parameter of the computer's OS or received via dynamic address allocation protocols such as DHCP. The address is likely not a legitimate IP address assigned by the Network Information Center (NIC) or service provider.

    Inside global address - A legitimate IP address assigned by the NIC or service provider that represents one or more inside local IP addresses to the outside world.

    Outside local address - The IP address of an outside host as it appears to the inside network. Not necessarily a legitimate address, it is allocated from an address space routable on the inside.

    Outside global address - The IP address assigned to a host on the outside network by the host's owner. The address is allocated from a globally routable address or network space.

    http://www.cisco.com/warp/public/556/8.html#def
    Life is a journey...
  • Options
    Ten9t6Ten9t6 Member Posts: 691
    SV wrote:
    Inside local address - The IP address assigned to a host on the inside network. This is the address configured as a parameter of the computer's OS or received via dynamic address allocation protocols such as DHCP. The address is likely not a legitimate IP address assigned by the Network Information Center (NIC) or service provider.

    Inside global address - A legitimate IP address assigned by the NIC or service provider that represents one or more inside local IP addresses to the outside world.

    Outside local address - The IP address of an outside host as it appears to the inside network. Not necessarily a legitimate address, it is allocated from an address space routable on the inside.

    Outside global address - The IP address assigned to a host on the outside network by the host's owner. The address is allocated from a globally routable address or network space.

    http://www.cisco.com/warp/public/556/8.html#def

    Good post and link...

    Kenny
    Kenny

    A+, Network+, Linux+, Security+, MCSE+I, MCSE:Security, MCDBA, CCNP, CCDP, CCSP, CCVP, CCIE Written (R/S, Voice),INFOSEC, JNCIA (M and FWV), JNCIS (M and FWV), ENA, C|EH, ACA, ACS, ACE, CTP, CISSP, SSCP, MCIWD, CIWSA
Sign In or Register to comment.