LAN Routing
1753670 Members
5627 Online
108799 Solutions
New Discussion

how to make NAT on a router HP msr2003

 
alexkg1
Occasional Advisor

how to make NAT on a router HP msr2003

A tunnel with a remote organization is configured on the hp msr 2003 router
gave us the subnet 192.168.5.0/24
My network is 192.168.0.0/24

config on my router

ipsec policy map1 10 isakmp
transform-set tran1
security acl 3001
remote-address 185.185.185.185
ike-profile profile1
reverse-route dynamic
reverse-route preference 10

ip route-static 10.51.1.47 32 185.185.185.185

acl advanced 3001
rule 4 permit ip source 192.168.5.50 0 destination 10.51.1.47 0

interface Vlan-interface2
ip address 192.168.0.1 255.255.255.0
#
interface Vlan-interface6
ip address 192.168.5.1 255.255.255.0

Now from the address 192.168.5.50 there is access to 10.51.1.47
Since all clients are on the 192.168.0.0/24 network need access to 10.51.1.47 from the network where the gateway is interface Vlan-interface2.

is it possible to implement such NAT on a router?

that is, when a client requests from the 192.168.0.0/24 subnet to the address 10.51.1.47, did he receive the ip 192.168.5.50 on the same router and connect to the remote server?

PS>>>

tried to do NAT and PBR on the Vlan-interface2 interface
but does not work, tell me what the error is.

interface Vlan-interface2
 ip address 192.168.0.1 255.255.255.0
 nat inbound 3999 address-group 5
 ip policy-based-route PBR-1


nat address-group 5
 address 192.168.5.50 192.168.5.50

acl advanced name ACL-1
 rule 10 permit ip source 192.168.0.82 0 destination 10.51.1.47 0

acl advanced 3999
 rule 0 permit ip source 192.168.0.82 0

policy-based-route PBR-1 permit node 5
 if-match acl name ACL-1
 apply next-hop 192.168.5.1

how to solve this problem correctly, please tell me

1 REPLY 1
akg7
HPE Pro

Re: how to make NAT on a router HP msr2003

Hello @alexkg1 ,

Sharing config guide if it can be helpful for you:

https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=c04770100

 

Thanks!

Note: While I am an HPE Employee, all of my comments (whether noted or not), are my own and are not any official representation of the companyAccept or Kudo