Tuesday, March 22, 2016

CISCO: conditional port-based NAT (policy-based PAT)?

I have a problem to nat-translate inbound http packets to different local_ips based on some condition (like dscp bits set). Actually the dscp bits get set on the incoming trafic using NBAR. I hope NBAR happens BEFORE nat translation on the nat outside interface. If not maybe more sofisticated solution needed.




Here is what I need approximately:



nat inside source static tcp  80 interface  80  
nat inside source static tcp 80 interface 80

No comments:

Post a Comment

linux - How to SSH to ec2 instance in VPC private subnet via NAT server

I have created a VPC in aws with a public subnet and a private subnet. The private subnet does not have direct access to external network. S...