Member # 31103
posted October 23, 2011 03:20 PM
I understand the logic and config behind p2p crypto and advertising the tun interface and loopbacks and then statically mapping the entire internal subnet to the loopback address of a box. But how would you do this for a one to one mapping?
ip nat inside source static network 184.108.40.206 220.127.116.11 /24 (for an entire subnet) successful
ip nat inside source static 18.104.22.168 22.214.171.124 fails
I guess my ASA nat is much stronger than IOS nat They seem to be the opposite from a configuration standpoint. Besides if you map an entire subnet how would you determine which host would get which flow? Maybe i'm having a brain fart.
Posts: 109 | From: NoVa | Registered: Jul 2011
| IP: Logged