|
> # ipnatadm -O -i -b -S 1.1.1.1/32 -M 134.109.192.223/32 > > NAT router cannot ping to 134.109.192.223. Is it a limitation > or I am missing some routing information within the NAT router? > But other host can connect to the NAT address by simply adding > a host routing entry without adding any routing information within > the NAT router! It will work if everything is setup properly. Yes, you do need a route for that NAT IP. Routing is done before the address translation happens, so the routing code will use 134.109.192.223. That's how it should be, see the document.
Other hosts can connect because their packets will be translated as soon as they arrive so internally the kernel uses 1.1.1.1. I hope I didn't get messed up myself and that my explanations are correct, didn't use NAT for some time ;-) |