Static NAT(Twice NAT) on inside and outside (on both sides) Configuration

Static NAT(Twice NAT) on inside and outside (on both sides) Configuration

• Topology
  
  
  
  
• Configuration Settings Overview
  
  
  1. R1 Static NAT
     
     inside source : 192.168.100.101 - 192.168.200.101
     outside source : 192.168.201.102 - 192.168.100.102
     outside source : 192.168.202.103 - 192.168.100.103
     outside source : 192.168.200.104 - 192.168.100.104
     
     command :
     ip nat inside source static 192.168.100.101 192.168.200.101
     ip nat outside source static 192.168.200.104 192.168.100.104 add-route (*2)
     ip nat outside source static 192.168.201.102 192.168.100.102 no-alias (*1)
     ip nat outside source static 192.168.202.103 192.168.100.103 no-alias (*1)
     
     (*1) no-alias :
     
     (*2) add-route :
     
     Routing Table :
     S 192.168.100.104/32 [1/0] via 192.168.200.104
     
     
     
  2. R1 Static Route
     
     ip route 192.168.100.102 255.255.255.255 192.168.200.2
     ip route 192.168.100.103 255.255.255.255 192.168.200.3
     
     
  3. Ping
     
     

     Source Host	Destination Host	Ping Destination IP Address
     HOST1	HOST2	192.168.100.102
     HOST1	HOST3	192.168.100.103
     HOST1	HOST4	192.168.100.104
     HOST2	HOST1	192.168.200.101
     HOST3	HOST1	192.168.200.101
     HOST4	HOST1	192.168.200.101

     
     
  4. NAT Order of Operation
     
     

     inside -> outside

     outside -> inside

     1.If IPSec then check input access list 2.decryption - for CET (Cisco Encryption Technology) or IPSec 3.check input access list 4.check input rate limits 5.input accounting 6.redirect to web cache 7.policy routing 8.routing 9.NAT inside to outside (local to global translation) 10.crypto (check map and mark for encryption) 11.check output access list 12.inspect (Context-based Access Control (CBAC)) 13.TCP intercept 14.encryption 15.Queueing

     1.If IPSec then check input access list 2.decryption - for CET or IPSec 3.check input access list 4.check input rate limits 5.input accounting 6.redirect to web cache 7.NAT outside to inside (global to local translation) 8.policy routing 9.routing 10.crypto (check map and mark for encryption) 11.check output access list 12.inspect CBAC 13.TCP intercept 14.encryption 15.Queueing

  
  
• Dynagen Config File / Router Config

  1. Dynagen .net file
  
  2. R1
  
  3. R2
  
  4. R3
  
  5. HOST1
  
  6. HOST2
  
  7. HOST3
  
  8. HOST4
  

• show command

  R1 :
    sh ip route
    sh ip nat translations
  
  1. R1