Masquerade and NAT

Masquerade and NAT

[Patrick Ahler]

Hi,
I am hoping to be able to run IP Masquerade and NAT on the same
firewall/router. ie 192.168.1.1-61 use NAT to translate their internal IP's
to external IP's (a.b.c.1-61), and have a variety of internal hosts on the
same subnet(as the other machines using NAT) using IP masquerading to pass
through the firewall.. ie 192.168.1.62-140 use IPMASQUERADE to translate
their internal ip's to a.b.c.62

Is this possible? If so how? I've found that in order to use IP MASQUERADE
you have to specify a subnet of internal ip's that will use IP MASQUERADE,
but what if I only want to select specific internal ip's that will use it?
Help? Thanks!


Patrick

Re: Masquerade and NAT

[Athan]

[-- Attachment #1: Type: text/plain, Size: 1154 bytes --]

On Thu, Mar 13, 2003 at 04:20:47PM -0500, Patrick Ahler wrote:
> Hi,
> I am hoping to be able to run IP Masquerade and NAT on the same
> firewall/router. ie 192.168.1.1-61 use NAT to translate their internal IP's
> to external IP's (a.b.c.1-61), and have a variety of internal hosts on the
> same subnet(as the other machines using NAT) using IP masquerading to pass
> through the firewall.. ie 192.168.1.62-140 use IPMASQUERADE to translate
> their internal ip's to a.b.c.62
> 
> Is this possible? If so how? I've found that in order to use IP MASQUERADE
> you have to specify a subnet of internal ip's that will use IP MASQUERADE,
> but what if I only want to select specific internal ip's that will use it?
> Help? Thanks!

   Um, why do MASQ at all ?  It's only really of use when your external
IP is dynamic.  If you've a static IP to use for the purpose just use
SNAT.

-Ath
-- 
- Athanasius = Athanasius(at)miggy.org / http://www.miggy.org/
                  Finger athan(at)fysh.org for PGP key
	   "And it's me who is my enemy. Me who beats me up.
Me who makes the monsters. Me who strips my confidence." Paula Cole - ME

[-- Attachment #2: Type: application/pgp-signature, Size: 240 bytes --]