Static NAT on Secure Router - Help

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts
  • mayler
    Hot Shot
    • Jul 2011
    • 23

    Static NAT on Secure Router - Help

    Have an interesting requirement.... I need to NAT a public address to a private address on a Secure Router 1002.

    This is preventing me from reading about SPB!

    I've read: http://support.avaya.com/css/P8/documents/100121840 (config guide for SR1002) but none of those configurations seem to work for me. Maybe I'm not doing it right?

    I'm trying to nat 198.224.10.50 to 10.30.12.225 on a SR1002 which has two interfaces, a ppp bundle and an ethernet interface.

    bundle is 'wan1' 10.254.2.1/30
    ethernet 0 10.30.12.245

    Traffic Destined to 198.224.10.50 will hit 10.254.2.1, at which time I want it to NAT the destination to 10.30.12.225. Source should remain the same.

    I've tried:

    config ip nat
    enable static
    address 10.30.12.225 198.224.10.50
    interface wan1


    I can ping 198.224.10.50 now, but if I try pinging 10.30.12.225 or 10.30.12.245 I don't get a response.
    Anyone doing anything like this? I figured it would be super easy...
    Last edited by mayler; 09-09-2011, 02:32 PM.
  • mayler
    Hot Shot
    • Jul 2011
    • 23

    #2
    I'm retarded.

    SR> configure terminal
    SR/configure> interface bundle Trenton
    SR/configure/interface/bundle Trenton> nat
    SR/configure/interface/bundle Trenton/nat> enable dynamic
    SR/configure/interface/bundle Trenton/nat> enable static
    SR/configure/interface/bundle Trenton/nat> address 192.168.1.6 100.1.1.6

    My test environment is using two ethernet interfaces to test this...and I tried configuring this on the wrong interface.

    Maybe this post will help someone down the road.

    Comment

    • krautd
      Member
      • Jan 2014
      • 3

      #3
      I'm trying to accomplish something similar but not having any luck. I want to static NAT a small range of IP addresses - one to one. For example, I want to static NAT 10.10.10.10 on E0 to 192.168.0.10 on E1, 10.10.10.11 to 192.168.0.11 and so on. I can get this working with a single NAT using the interface address, but I have not had any luck getting a range to work? From what I've read, it appears the WAN interface is limited to T1, which we do not have so I've been trying to accomplish this using only the LAN ports. Can this even be done on the SR1002?

      Thanks!

      Comment

      Loading