Maipu - Outside Destination NAT Testing

Dear All, I came across one testing for Outside destination NAT. In this post I am sharing this report. Hope it will help in real time installation using Maipu Routers.

Normally we do inside NAT, But some time as per requirement we have to do outside Destination NAT. 

Topology details - 

Objective - CPE LAN network 192.168.115.155/24 will access 192.168.115.150 to access 207.67.x.x server. LAN network should not directly access public server. 

Solution - Outside Destination NAT 

Configuration template:

MP801E:

ip access-list extended 1001

 10 permit ip any any

 exit

interface fastethernet0

 description ###MPLS_WAN_LINK###

 ip address 10.205.29.9 255.255.255.252

 ip nat outside

 exit

interface fastethernet1

 description ###LAN_network###

 ip address 192.168.115.155 255.255.255.0

 ip nat inside

 exit

                                 

ip nat outside source static 207.67.74.x 192.168.115.150

ip nat inside source list 1001 interface fastethernet0 overload

ip route 0.0.0.0 0.0.0.0 10.205.29.10

Testing result:

From PC to ping 192.168.115.150:

On MAIPU 801E can take the debug information when PC ping server:

 

And the debugs on MP801E:

MP801E#

01:12:39: %NAT-7-TRANS: input from fastethernet1, proto=1, src=192.168.115.200:58760, dst=192.168.115.150: 0, vrf=0.

01:12:39: %NAT-7-TRANS: create translation record, 192.168.115.150:0-->207.67.74. x :58760, proto=1, vrf=0.

01:12:39: %NAT-7-TRANS: destination translation, dst=207.67.74.x :58760.

01:12:39: %NAT-7-TRANS: forwarded.

01:12:39: %NAT-7-TRANS: output to fastethernet0, proto=1, src=192.168.115.200:58760, dst=207.67.74. x: 0, vrf=0.

01:12:39: %NAT-7-TRANS: create translation record, 192.168.115.200:58760-->10.205.29.9:58760, proto=1, vrf=0.

01:12:39: %NAT-7-TRANS: source translation, src=10.205.29.9:58760.

01:12:39: %NAT-7-TRANS: forwarded.

MP801E#

Description -  You can see when PC-192.168.115.200 is trying to access public server. PC is accessing 192.168.115.150 and the request is forwarded to Public server 207.67.74.x

Hope this testing report will help you ...

Thanks for reading.. 

For feedback. Plz comment with Name and Mail ID..