Regarding NAT
pannupandit
Member Posts: 92 ■■□□□□□□□□
in CCNA & CCENT
I have 1 query......
actually in our office we have ftp servers but now we want to implement NAT ..and our FTP servers have public ip . these servers are accessed from outside network.I just want to know that whether we can implement nat inbound so that others on the internet can access these servers from outside world.
like I have private address range of 192.168.1.0 /24 and public range of 206.203.192.160/27 .
if anyone have suggessions plz help me...
we need to do nat in both ways or in one way...plz if anyone can tell , tell me with 1 e.g.
Thanx in advance....
Pannu
actually in our office we have ftp servers but now we want to implement NAT ..and our FTP servers have public ip . these servers are accessed from outside network.I just want to know that whether we can implement nat inbound so that others on the internet can access these servers from outside world.
like I have private address range of 192.168.1.0 /24 and public range of 206.203.192.160/27 .
if anyone have suggessions plz help me...
we need to do nat in both ways or in one way...plz if anyone can tell , tell me with 1 e.g.
Thanx in advance....
Pannu
Comments
-
bmauro Member Posts: 307Very easy to implement. Take a look at the white papers so you can understand how cisco implements NAT and how you can configure it.
http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094e77.shtml -
sprkymrk Member Posts: 4,884 ■■■□□□□□□□It can depend on your firewall and it's capabilities on the exact way to set it up. You really shouldn't have people accessing your ftp servers on your internal network though. You're leaving a wide open hole for someone to exploit.
However, if you can mention how many ftp servers you have and what kind of firewall you have we can try to help. In general, the answer is "yes" it can be done.All things are possible, only believe. -
pannupandit Member Posts: 92 ■■□□□□□□□□hey guys i wont implement it on firewall but on 2600 series router. ihave only 1 ftp server that i want somebody to access it from outside.
like i have 1 private ip addres range of 192.168.1.0/24
and let the public ip address range is from 206.203.192.160/27 network . let it be 206.203.192.167
so in router ..it is sure we will do static natting but how...
by writing this statement:
router(config)#ip nat inside source 192.168.1.10 206.203.192.167
is this statement will solve my problem or i have to do something more.
thanx -
bmauro Member Posts: 307Did you look at the link?
I'll even narrow it down -
http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094e77.shtml#topic1
This shows the basic NAT configuration - you can customize it and change it to fit your specific needs.
http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml#topic2
http://www.cisco.com/en/US/tech/tk648/tk361/technologies_configuration_example09186a0080093f2f.shtml#t2 -
pannupandit Member Posts: 92 ■■□□□□□□□□hey bmauro,, thanx for the link boss...i have just check that link...the content was really goood..thanx...bro