1:1 destination nat mapping

[grenzi]

Hi everybody,

  does anybody know if it is possible to write a single destination NAT policy in order to map ip addresses from a given range/network to a corresponding range/network of the same size preserving the host portion of the address? I try to explain with an example. I would like to translate packets destined to 192.168.10.0/24 with address in 10.168.10.0/24 in this way:

192.168.10.1 --> 10.168.10.1

192.168.10.2 --> 10.168.10.2

192.168.10.3 --> 10.168.10.3

...and so on, without configuring 254 static destination nat policies.

Anybody knows?

Thank you in advance!

[kiwi · Accepted solution]

Hi @grenzi ,

Use the Static IP mapping type to translate an entire address range to a specific address range, a one-to-one mapping. 

Check out the following KB:

Source NAT Translation Types and Typical Use Cases 

EDIT >>>

Just noticed that you talked about destination NAT ...

You can configure ranges like this example  :

Source: 192.168.1.1-192.168.1.4

Destination: 2.2.2.1-2.2.2.4

As explained here :

destination-nat 

Cheers,

-Kiwi.

[grenzi]

Thank you for the links!

[wsing]

Hi Kiwi,

When implementing 1:1 static NAT for an IP address range, are there anythings I should consider?  For example, is there maximum number of NAT?  Do you recommend do static NAT for /16 IP address range?

Thanks,

Wsing