NAT under HPUX 11.0

[Tommy Brown]

We are creating a FIREWALL-1 system on an A class under 11.0. Has anyone setup NAT in a one-to-one and many-to-one configuration. This is a multihome system with one net being a 10.n.n.n scheme
thanks,
tommy

[Kofi ARTHIABAH]

Create an inside-net object (which is the network 10.10...) in FW-1 and hide them behind the firewalls published address... on the NAT tab, set it up for hide.

if you want to be able to access one of the machines on the 10.10... network from outside, you would have to build a plug from the outside to the object.

1. choose a valid IP address and publish it on the firewall with:
arp -s valid_ip FW-external-mac-address
(this will make the firewall listen for valid_ip)
2. create an object for the target-machine with STATIC NAT defined as valid_ip
3. set up a route from the target-machine to the FW.

there are some very good faqs at http://www.phoneboy.com/fw1

good luck

[Tommy Brown]

We were wondering how to setup natting under HPUX11.0, as opposed to FW1
Tommy

[Kofi ARTHIABAH]

Hi Tommy:
I do not believe that NAT is supported on native HPUX 11.0 you certainly will need to install some additional software...however, have you considered setting up a linux box and using the IP-masquerading (or IP-chains as it is now called features) to allow for NATs?

http://www.redhat.com/mirrors/LDP/HOWTO/IPCHAINS-HOWTO.html

good luck

[Tommy Brown]

We were hoping to avoid the "Linux Solution". Thanks for the input. Do you know of any HPUX oriented TPSW that might be out there? I've checked the Porting center but could not recognize anything appropriate.
Thanks again
tommy

[Kofi ARTHIABAH · Accepted solution]

Hi Tommy:

Just found out that there is a free NAT software for HPUX 11.0 its called IPfilter - its still under development, check it out at:

http://cheops.anu.edu.au/~avalon/ipf-mentat.html

Good luck