[127273] in North American Network Operators' Group
RE:
daemon@ATHENA.MIT.EDU (Mike Ruiz)
Fri Jun 18 16:39:06 2010
Date: Fri, 18 Jun 2010 15:38:48 -0500
In-Reply-To: <AANLkTilUeCT9YuCZtI0ZPRra8CezJV19vxSDDBhW6Kvc@mail.gmail.com>
From: "Mike Ruiz" <mruiz@lstfinancial.com>
To: "Andrey Khomyakov" <khomyakov.andrey@gmail.com>
Cc: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
Also this 192.168.1.0/24 needs to have access to my other prefixes. It =
only needs to NAT'd when it needs to connect to that specific network.
=20
From: Andrey Khomyakov [mailto:khomyakov.andrey@gmail.com]=20
Sent: Friday, June 18, 2010 3:25 PM
To: Mike Ruiz
Cc: nanog@nanog.org
Subject: Re: <NAT translation from a sourced network to a destination =
network>
=20
Do you mean you want certain addresses on /24 to NAT out to /27, but not =
all of them? Sounds like and ACL will do:
http://articles.techrepublic.com.com/5100-10878_11-1039094.html
-ak
On Fri, Jun 18, 2010 at 4:13 PM, Mike Ruiz <mruiz@lstfinancial.com> =
wrote:
Ok here we go. I know the subject is a little ambiguous, please allow =
to explain.
I have a network of 192.168.1.0/24 and I need it to reach a network =
10.0.1.0/27 only when it needs to be accessed by specific machines that =
reside on the 192.168.1.0/24 network.
192.168.1.10 =E0 NAT =E010.0.1.10 =E0 route that packet to 10.0.1.1.
I only want specific host to route to that specific /27 network .
Any help would be appreciated. So far what I have gathered is only for =
VPN connections but I do not want to build a VPN. Thank you again in =
advance.
Michael Ruiz
Network Engineer
"If you tell people where to go, but not how to get there, you'll be =
amazed at the results." -- General George S. Patton Jr.
--=20
Andrey Khomyakov
[khomyakov.andrey@gmail.com]