Does NAT really need secondary IPs?

[Mike Murphy<mcmurphy@cdcfcu.com>]

I'm working on a BM3.7, new hardware and all, to replace a BM3.0.  i see in install notes I must add as a secondary IP address each IP address i want to static NAT.  But on my 3.0 server, as on the 2.1 before it, I've static NATted a set of IP addresses without ever adding them as secondary IP addresses.  I figured the NAT table entry served that purpose.  Am I misunderstanding, or what?  My static NAT is in each case the same IP address translated to itself.  Does that make a difference?

[Massimo Rosen]

Hi,

> "Mike Murphy" wrote:
>
> I'm working on a BM3.7, new hardware and all, to replace a BM3.0. i
> see in install notes I must add as a secondary IP address each IP
> address i want to static NAT. But on my 3.0 server, as on the 2.1
> before it, I've static NATted a set of IP addresses without ever
> adding them as secondary IP addresses.

Hardly possible. This didn't change, and was true ever since. What
*might* be the case, do you by chance had the secondary addresses
configured in Nwadmin under IP addresses for the BM? All addresses
configured there will get bound automatically, maybe that made you
believe it's the NAT that did that. It wasn't.

> My static NAT
> is in each case the same IP address translated to itself.

Umm. What purpose does that serve?

CU,
--
Massimo Rosen
Novell Product Support Forum Sysop
No emails please!
http://www.cfc-it.de

[Mike Murphy<mcmurphy@cdcfcu.com>]

In NWAdmin / BorderManager Setup / IP Addresses are listed only the real 3 - internet address, DMZ address, and internal address - not the addresses of my DMZ servers i thought were being NATted.  I inherited the "translate-to-itself" NAT from the BM 2.1 someone set up for us.  From your reply I'm starting to think that:

1 - Static NAT on these addresses has never worked.

2 - It doesn't matter because there's no translation to do.

 

Does it look that way to youI'll find a good ?  I'll find a good time, remove an address from the NAT table, and test that out.

>>> Massimo Rosen<mros...@spamcfc-it.de> 11/13/03 05:54PM >>>