[inet-admins] Server farm with FW1 i Cisco NAT

[Egons Bush <egons@bank.lv>]

Hi!

Zaatachil ASCII art, v kotorom narisovano to, kak vygladit shema seti. Na
Cisco hochetsa sdelatj NAT, shto-by dla Firewall-1 eto vygladelo kak odin IP
adres. Delajem NAT, ping idet, traceroute idet, a FTP, Telnet, NetBIOS, itd
ni v kakuju. V testovom rezhime na FW dla ServerFarm razresheno vse dla
vseh. Bez NATa - vse prohodit. V chem grabli? Mozhet NAT kak-to po umnomu
nuzhno delatj, osobenno, esli eto Ethernet-Ethernet NAT? 

Esli vkljuchit' "debug ip packet", to na Cisco E1 (na FW) vidni kakie-to
encapsulation errori... Nikakoi encapuljacii tam netu. IOSi v predelah 11.3
menjal - ne pomogaet. 12.x ne mogu postavit' ibo pamjati net.

Egons

           External networks
                   |
                   |
                   |
    S              |
    e f            |
    r a---------Firewall--------DMZ
    v r            |
    e m            |
    r              |  
                   |e1
                 Cisco
                   |e0
                   |  
                   |
                   |
                  LAN