topic Re: NAT under HPUX 11.0 in Operating System - HP-UX

NAT under HPUX 11.0

Tommy Brown — Fri, 11 Aug 2000 16:06:29 GMT

We are creating a FIREWALL-1 system on an A class under 11.0. Has anyone setup NAT in a one-to-one and many-to-one configuration. This is a multihome system with one net being a 10.n.n.n scheme
thanks,
tommy

Re: NAT under HPUX 11.0

Kofi ARTHIABAH — Fri, 11 Aug 2000 19:28:04 GMT

Create an inside-net object (which is the network 10.10...) in FW-1 and hide them behind the firewalls published address... on the NAT tab, set it up for hide.

if you want to be able to access one of the machines on the 10.10... network from outside, you would have to build a plug from the outside to the object.

1. choose a valid IP address and publish it on the firewall with:
arp -s valid_ip FW-external-mac-address
(this will make the firewall listen for valid_ip)
2. create an object for the target-machine with STATIC NAT defined as valid_ip
3. set up a route from the target-machine to the FW.

there are some very good faqs at http://www.phoneboy.com/fw1

good luck

Re: NAT under HPUX 11.0

Tommy Brown — Mon, 14 Aug 2000 14:21:19 GMT

We were wondering how to setup natting under HPUX11.0, as opposed to FW1
Tommy

Re: NAT under HPUX 11.0

Kofi ARTHIABAH — Tue, 15 Aug 2000 16:41:41 GMT

Hi Tommy:
I do not believe that NAT is supported on native HPUX 11.0 you certainly will need to install some additional software...however, have you considered setting up a linux box and using the IP-masquerading (or IP-chains as it is now called features) to allow for NATs?

http://www.redhat.com/mirrors/LDP/HOWTO/IPCHAINS-HOWTO.html

good luck

Re: NAT under HPUX 11.0

Tommy Brown — Tue, 15 Aug 2000 16:44:21 GMT

We were hoping to avoid the "Linux Solution". Thanks for the input. Do you know of any HPUX oriented TPSW that might be out there? I've checked the Porting center but could not recognize anything appropriate.
Thanks again
tommy

Re: NAT under HPUX 11.0

Kofi ARTHIABAH — Wed, 23 Aug 2000 15:30:55 GMT

Hi Tommy:

Just found out that there is a free NAT software for HPUX 11.0 its called IPfilter - its still under development, check it out at:

http://cheops.anu.edu.au/~avalon/ipf-mentat.html

Good luck