RE: [FW1] NAT across a VPN - brain teaser challenge - read carefu lly

[Dan Hitchcock <danh@FW1-NOSPAMxylo.com>]

Exactly - that's the static NAT option.  That's exactly what we're trying to get around in the question I posed.  The consensus seems to be that I'm NOT crazy (not on this particular topic, anyway :), and the only options are the options presented in my original post.  Thanks to many for responses and suggestions, which hopefully have made many people wiser (myself included).

Dan Hitchcock
CCNA, MCSE
Network Engineer
Xylo, Inc. (formerly employeesavings.com)

The work/life solution for corporate thought leaders

-----Original Message-----
From: LULLIER Thomas [mailto:LULLIER@LFB.fr]
Sent: Friday, October 06, 2000 2:04 AM
To: 'Dan Hitchcock'; fw-1-mailinglist@lists.us.checkpoint.com
Subject: RE: [FW1] NAT across a VPN - brain teaser challenge - read carefu lly

here is simple theory about what you could do:

(from : http://www.uq.net.au/~zzdmacka/the-nat-page/natinformation.html )

 

Thomas.

 

Static Network Address Translation

Static NAT is usually only implemented between private networks (although other possibilities also exist). Suppose there are 2 networks each having the same address space.

In this way, the upper network addresses the bottom network using the addresses 10.3.yy.zz and the bottom metwork addresses the top network using the addresses 10.2.ww.xx