NAT Outside Addresses to Inside with same address

shizzilla · 06-23-2006, 12:24 AM

Hi i have an idea for NAT 1:1 using 2 linux routers. I am wondering if anyone knows if it works or has tried it

What i would like to do is nat static ip addresses

69.68.67.10-250/24

to an inside range of 10.1.1.10-250/24

then NAT these addresses to a 2nd router with

69.68.67.10-250/24

So the outside addresses are NAT'd throw 2 routers so the client sees an address that is the same as the outside address.

katayamma · 06-23-2006, 03:54 PM

As I understand it, you want to have your internal network using the 69.68.67.0/24 network while still being natted behind a firewall?

Yes, you could double nat, though I'm not sure how well it would work. I know I can do it with Ciscos, so I don't see why you couldn't pull it off with pair of Linux boxes.

Personally I'd just stick with using private IP spaces for the internal network unless there was some overwhelming need to pretend that they were directly connected to the external world.

win32sux · 06-23-2006, 04:08 PM

Quote:

Originally Posted by katayamma

Yes, you could double nat, though I'm not sure how well it would work. I know I can do it with Ciscos, so I don't see why you couldn't pull it off with pair of Linux boxes.

yeah, linux/iptables can do double-NAT just fine...