Prev | Current Page 293 | Next

Yusuf Bhaiji

"Network Security Technologies and Solutions"


Figure 6-15 shows how to configure Identity NAT. The NAT engine will not perform address translation for the
inside hosts on the 209.165.201.0/27 network, and the source address remains the same when it exits. This
method can also be used when the internal network uses a public routable address and does not require address
translation.
Figure 6-15. Identity NAT
Static Identity NAT (static Command)
Static identity NAT is similar to static NAT, but it creates a fixed translation (1-to-1) of real addresses while
keeping the same mapped addresses. Static identity NAT can be used for bidirectional communication.
Figure 6-16 shows how to configure Static Identity NAT. The NAT engine will not perform address translation for
the inside hosts on the 10.1.1.0/24 network, and the source address remains the same when it exits. Outside
users can initiate an inbound connection to this address as long as the address is routable on the destination
side network.
Figure 6-16. Static Identity NAT
Example 6-19 shows how to configure Outside Static Identity NAT. The NAT engine will not perform address
translation for the Outside host 209.165.201.15 when accessed from Inside.
Example 6-19. Configuring Outside Static Identity NAT
Code View:
hostname(config)# static (outside,inside) 209.


Pages:
281 282 283 284 285 286 287 288 289 290 291 292 293 294 295 296 297 298 299 300 301 302 303 304 305