Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations gkittelson on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

NAT or Masquerade 1

Status
Not open for further replies.

Pfafman

IS-IT--Management
Jun 12, 2009
1
US
I have an ipsec tunnel setup on my firewall between my office and one of our business partners. There is a requirement to make all traffic to the two servers at the remote office look like it came from a specific ip address. I can only NAT the external interface on my firewall so I need to make it happen on my core router before it gets to my firewall.

So I have to make all traffic sent to that tunnel look like it came from a specific IP address. I setup a loopback0 interface with the address that the traffic needs to come from and used ip NAT inside and have routed the two remote IP's to the internal interface on my firewall. How do I force the traffic to the remote servers to go through the loopback interface so it gets translated?

interface Loopback0
ip address ###.###.###.47 255.255.255.255
ip nat inside

Any ideas?
 
I'd skip the loopback and do a static nat.

ip nat inside source static 1.1.1.1 2.2.2.2
 
You can do "ip add unnumbered lo0" on all interfaces you need traffic to mask with lo0.

/
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top