nv-l
[Top] [All Lists]

Re: PB with NAT

To: nv-l@lists.tivoli.com
Subject: Re: PB with NAT
From: "Maxime TRANNOY" <MTRANNOY@fr.ibm.com>
Date: Fri, 4 Jan 2002 17:21:04 +0100
Stephen,

Thanks for your answer,

I ask this question because before installing my firewall on my map some of
my natted equipments where on my map without using CNAT.
But now that I put my Firewall in my seedfile the nated equipment have
disapeared and now they IP adresses appeared like interfaces.

So i thought there was a solution without using CNAT.


Cordialement.

Maxime TRANNOY
IGS - Network Delivery Support Center
Tel : +33 (0) 492 114 767
mailto:mtrannoy@fr.ibm.com



                                                                                
                                       
                    Stephen                                                     
                                       
                    Hochstetler/Austin       To:     IBM NetView Discussion 
<nv-l@tkg.com>                             
                    /IBM@IBMUS               cc:                                
                                       
                    Sent by:                 Subject:     Re: [NV-L] PB with 
NAT                                       
                    owner-nv-l@tkg.com                                          
                                       
                                                                                
                                       
                                                                                
                                       
                    04-01-2002 16:36                                            
                                       
                    Please respond to                                           
                                       
                    IBM NetView                                                 
                                       
                    Discussion                                                  
                                       
                                                                                
                                       
                                                                                
                                       



Maxime,

Yes there is a solution to the problem.   The problem is that the NAT
simply translates the header on the ICMP and SNMP packets coming back to
you.   But SNMP packets that NetView is using also has addresses in the
payload of those packets.    When NetView reads the MIB, it is getting IP
information in that MIB.

The solution is to install a CNAT (Comprehensive Network Address
Translator) between your NetView and NATed network.   This is a Tivoli
product, you should be able to read about it on the web pages.   It will
work WITH your firewall NAT.    (It would also do the NAT for you if you
did not already have one).

There is a component of that product that installs on the NetView server so
that the server knows that these addresses are being translated.

Kind regards,
Stephen Hochstetler              shochste@us.ibm.com
International Technical Support Organization  - Austin
Office - 512-436-8564                      FAX - 512-436-8701

ITSO redbooks at  http://www.redbooks.ibm.com

_________________________________________________________________________
NV-L List information and Archives: http://www.tkg.com/nv-l


<Prev in Thread] Current Thread [Next in Thread>

Archive operated by Skills 1st Ltd

See also: The NetView Web