<NAT translation from a sourced network to a destination network>

Greg Whynott Greg.Whynott at oicr.on.ca
Sat Jun 19 16:02:48 UTC 2010

depending on your vendor equipment you'll need an ACL or a route map to define the traffic you wish to Nat and apply it to the 'nat engine'. 

if you are doing this on cisco ASA or similar it might look something like this:

-define the interesting traffic with an ACL:

access-list 110 permit   ip
access-list 110 deny ip any any

- create a route-map:

route-map natme permit 10
 match ip address 110

- apply the map:
ip nat inside source route-map natme interface GigabitEthernet0/1 overload

hope that helps.

From: Mike Ruiz [mruiz at lstfinancial.com]
Sent: Friday, June 18, 2010 4:13 PM
To: nanog at nanog.org
Subject: <NAT translation from a sourced network to a destination network>

Ok here we go.  I know the subject is a little ambiguous, please allow to explain.

I have a network of and I need it to reach a network only when it needs to be accessed by specific machines that reside on the network. à NAT à10.0.1.10 à route that packet to

I only want specific host to route to that specific /27 network .

Any help would be appreciated. So far what I have gathered is only for VPN connections but I do not want to build a VPN.  Thank you again in advance.

Michael Ruiz

Network Engineer

"If you tell people where to go, but not how to get there, you'll be amazed at the results." -- General George S. Patton Jr.

More information about the NANOG mailing list