Advice about 1:1 NAT
-
Hello All,
We have an interesting situation in that we are in the middle of migrating to an MPLS WAN (managed by our ISP). All of our sites are protected by a firewall at the head end. That is our aggregation point, and all traffic from the remote locations goes there before heading back out an interface to the rest of the world.
What I am wondering is this: Is it possible to use 1:1 NAT at each remote location so that we don't have to re-ip all of our sites?
We have transport subnets, which is where the WAN interface sits, and data subnets, which is supposed to be where the workstations sit. Our ISP routes all traffic to and from our transport subnets, and we have routers to route from our data subnets to the transport subnets. We would like to take the networks that we have in place and translate them to our data networks that our ISP will route (ie 192.168.1.0/24 to x.x.121.0/24). We actually have 2 data networks (ie x.x.120.0/24 and x.x.121.0/24 in each location). Is 1:1 with a VIP network (x.x.121.0/24) the way to go? We could do a static 1:1 NAT to our servers.
Thanks in advance