HP 7102dl help with NAT is requared.

[_victor]

I got stuck with a simple problem. I have several public adresses xxx.xxx.xxx.1 – xxx.xxx.xxx.5 and want to translate them to servers inside 192.168.0.0/24 net.
Sorry, I dont have config-file with me, but I'll try to reproduce it as close as possible. This is what I entered to configure NAT:
(HP7102 has 2 eth interfaces Eth 0/1 192.168.0.102 and Eth 0/2 xxx.xxx.xxx.1)
#ip access-list standard INSIDE
#permit any

#ip access-list extended OUTSIDE1
#permit ip any host xxx.xxx.xxx.2
#ip access-list extended OUTSIDE2
#permit ip any host xxx.xxx.xxx.3
#ip access-list extended OUTSIDE3
#permit ip any host xxx.xxx.xxx.4
#ip access-list extended OUTSIDE4
#permit ip any host xxx.xxx.xxx.5

#ip policy-class NAT_INSIDE
#nat source list INSIDE address xxx.xxx.xxx.1 overload

#ip policy-class NAT_OUTSIDE
#nat destanation list OUTSIDE1 address 192.168.0.77
#nat destanation list OUTSIDE2 address 192.168.0.188
#nat destanation list OUTSIDE3 address 192.168.0.7
#nat destanation list OUTSIDE4 address 192.168.0.26
#nat destanation list OUTSIDE5 address 192.168.0.101

#interface eth 0/1
# access-policy NAT_INSIDE

#interface eth 0/2
# access-policy NAT_OUTSIDE

The problem is that I dont see any of the servers xxx.xxx.xxx.1-5 from the outsude. They dont respond to ping basicly due to the absence of an arp entry in the hosts table.
I know that Cisco PIX firewalls have
ip nat pool MYPOOL 171.69.233.208 171.69.233.223 netmask 255.255.255.240
command that defines a scope of public addresses. How do we define this in HP-routers language?

[Olaf Borowski]

Hi,

You need to configure the other address as secondary on the outside.
.1 would be the primary and 2 through 5 as secondary.
Also, look at the documentation for 1:1 NAT

Hope this helps.

Olaf