| Author |
Cisco NAT Question
|
|
| atlantis 2001-03-22, 5:42 pm |
| I have 2 inside networks as follows:
204.186.200.0/24 on FastEthernet0/0
208.108.162.0/24 on FastEthernet0/1
I have 1 outside network as follows:
T1 - Serial 0/0
I need to move a single machine from the 204 network to the 208 network as follows:
204.186.200.7 moves to 208.108.162.7
I know that I will be able to access 208.108.162.7 from the Internet without running NATs; no problem.
However, I also want Internert users to access the machine using its old IP address of 204.186.200.7. I can setup NATs in the Cisco router using the following command:
ip nat inside source static 208.108.162.7 204.186.200.7
After I enter the above command, I am able to access the machine from the Internet (which has a physical address of 208.108.162.7) by entering its old address of 204.186.200.7. So far so good. However, I can no longer access this machine via its actual/new/physical IP address of 208.108.162.7.
What I want to do is be able to access this one machine via the Internet using both IP addresses. So far, I can do one or the other but not both. Any ideas? | |
|
| did you route add statements on your pc's?
route ADD 157.0.0.0 MASK 255.0.0.0 157.55.80.1 METRIC 3 IF 2
destination^ ^mask ^gateway metric^ ^ | |
|
| I entered the following and got this error:
route add 204.186.200.7 mask 255.255.255.0 208.108.162.1
The route addition failed: 87
Do I have to add the old IP address to my system network configuration? Currently only the new IP address is configured on the machine... not both. | |
|
| BTW: This is an NT 4.0 Server. | |
|
| You want your nt server to be on two networks, then yes then you would want to... | |
|
| why would you want to use both ip addresses?
I would have thought the best way would be to use DNS, that way you dont need to worry about changes to the ip address. The outside world will contact based on name. - covers you if you change ip address again at some point in the future.
Or am i missing the point? | |
|
| Just had a thought
I can't see why you would want to do this as it creates a security issue.
You could make the server multihomed and connected to each of the subnets.
I would not do it myself
You cant have a server as a member of two subnets without routing/VLAN and since the other network already exists you are going to upset the routing to the other subnet. Where will the router send packets for the 204 network it wont be to the 208 without subinterfaces set-up. |
|
|
|