Hirschmann HiSecOS EAGLE20 - 1:1 Nat

Routing > NAT > 1:1 NAT
Routing
380
RM GUI HiSecOS EAGLE20/30
Release 3.0 09/2015
Routing > NAT > 1:1 NAT
8.30 1:1 NAT
The "1:1 NAT" process offers the option of establishing communication links
within a local network to devices that are actually located in other networks.
The NAT router virtually “shifts” the devices into the local network. To do this,
the NAT router replaces the virtual with the actual IP address in the data
packet while sending it. A typical application is the connecting of several
identically structured production cells with the same IP address to a server
farm.
The prerequisite for the "1:1 NAT" process is that the NAT router itself
responds to ARP requests. To make this happen, turn on the "Proxy ARP"
function on the ingress interface.
Figure 11: How the 1:1 NAT process works
 To use the NAT process, set up a router interface for each network and
turn on the routing function in the device.
The data packets go through the filter functions of the device in the following
sequence:
192.168.1.100
Ingress
Interface
Egress
Interface
Zieladresse
Destination Address
Neue Zieladresse
New Destination Address
Proxy ARP
192.168.1.8
192.168.2.0/24
1:1 NAT
192.168.1.0/24
dest
new dest
192.168.1.100
192.168.2.100
Regel
Rule
192.168.2.100