topic Also, on R1 you have IP nat in Switching https://community.cisco.com/t5/switching/nat-problem/m-p/3092435#M388199 <P>Also, on R1 you have IP nat inside and outside interfaces configured, but there is nothing configured to be NATted.</P> <P>What are the requirements for this network ? Is this a lab ?</P> Sat, 12 Aug 2017 08:51:12 GMT Georg Pauwen 2017-08-12T08:51:12Z NAT problem? https://community.cisco.com/t5/switching/nat-problem/m-p/3092428#M388192 <P>My server can send to router 1, router 2 and multilayer switch, the router 2 and multilayer sw can't send to server. The server and router 1 also can't send to pc, <SPAN id="result_box" class="short_text" lang="en"><SPAN>same situation pc can't send to server but can send to router 1.</SPAN></SPAN></P> <P><SPAN class="short_text" lang="en"><SPAN><IMG src="https://community.cisco.com/legacyfs/online/media/capture_309.png" class="migrated-markup-image" /></SPAN></SPAN></P> <P></P> <P>Router 1 configuration</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">hostname R1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">enable secret 5 $1$mERr$NL29xH54hwvZoGzIJj1v40</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip dhcp pool DNSServer</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.15.0 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">default-router 192.168.15.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">dns-server 100.10.0.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no ip cef</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no ipv6 cef</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">spanning-tree mode pvst</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">spanning-tree vlan 5,10,15,20,30,40,50,88,90,99 priority 4096</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.15.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip nat inside</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">duplex auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">speed auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no ip address</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">duplex auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">speed auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">shutdown</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Serial0/3/0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.90.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip nat outside</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">clock rate 128000</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Serial0/3/1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no ip address</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">clock rate 2000000</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">shutdown</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no ip address</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">shutdown</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">router rip</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.15.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.90.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip nat inside source static 192.168.15.1 192.168.90.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip default-gateway 192.168.99.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip classless</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip route 192.168.95.0 255.255.255.0 192.168.90.2</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip flow-export version 9</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">access-list 1 permit 0.0.0.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no cdp run</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">end</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;"></P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">Router 2 configuration</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">hostname R2</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">enable secret 5 $1$mERr$NL29xH54hwvZoGzIJj1v40</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip dhcp excluded-address 192.168.5.1 192.168.5.20</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip dhcp excluded-address 192.168.90.1 192.168.90.3</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip dhcp pool Voip</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.5.0 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">default-router 192.168.5.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">option 150 ip 192.168.5.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip dhcp pool Wifi</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.88.0 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">default-router 192.168.88.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">dns-server 100.10.0.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no ip cef</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no ipv6 cef</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">spanning-tree mode pvst</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">spanning-tree vlan 5,10,15,20,30,40,50,88,99 priority 4096</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.95.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip nat outside</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">duplex auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">speed auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/0.5</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">encapsulation dot1Q 5</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.5.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/0.10</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">encapsulation dot1Q 10</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.10.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/0.15</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">encapsulation dot1Q 15</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.15.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/0.20</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">encapsulation dot1Q 20</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.20.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/0.30</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">encapsulation dot1Q 30</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.30.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/0.40</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">encapsulation dot1Q 40</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.40.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/0.50</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">encapsulation dot1Q 50</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.50.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/0.88</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">encapsulation dot1Q 88</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.88.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/0.99</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">encapsulation dot1Q 99 native</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.99.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no ip address</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">duplex auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">speed auto</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">shutdown</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Serial0/3/0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no ip address</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">clock rate 2000000</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">shutdown</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Serial0/3/1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.90.2 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip nat inside</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no ip address</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">shutdown</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">router rip</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.90.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.95.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip default-gateway 192.168.99.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip classless</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip route 192.168.15.0 255.255.255.0 192.168.90.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip flow-export version 9</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no cdp run</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">end</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;"></P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">Multilayer Switch configuration</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">hostname MS1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">enable secret 5 $1$mERr$NL29xH54hwvZoGzIJj1v40</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip dhcp pool CustomerAndService</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.10.0 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">default-router 192.168.10.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">dns-server 100.10.0.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip dhcp pool Finance</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.20.0 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">default-router 192.168.20.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">dns-server 100.10.0.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip dhcp pool HR</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.30.0 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">default-router 192.168.30.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">dns-server 100.10.0.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip dhcp pool ITSupport</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.40.0 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">default-router 192.168.40.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">dns-server 100.10.0.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip dhcp pool Admin</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.50.0 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">default-router 192.168.50.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">dns-server 100.10.0.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip routing</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">spanning-tree mode pvst</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">spanning-tree vlan 5,10,15,20,30,40,50,88,90,99 priority 4096</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk native vlan 99</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk encapsulation dot1q</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport mode trunk</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/2</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk native vlan 99</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk encapsulation dot1q</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport mode trunk</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/3</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk native vlan 99</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk encapsulation dot1q</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport mode trunk</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/4</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk native vlan 99</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk encapsulation dot1q</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport mode trunk</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/5</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk native vlan 99</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk encapsulation dot1q</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport mode trunk</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/6</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk native vlan 99</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk encapsulation dot1q</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport mode trunk</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/7</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk native vlan 99</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport trunk encapsulation dot1q</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">switchport mode trunk</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/8</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/9</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/10</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/11</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/12</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/13</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/14</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/15</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/16</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/17</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/18</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/19</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/20</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/21</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/22</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/23</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface FastEthernet0/24</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface GigabitEthernet0/1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface GigabitEthernet0/2</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">no ip address</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">shutdown</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan10</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">mac-address 000b.be52.2501</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.10.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan15</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">mac-address 000b.be52.2502</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.15.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan20</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">mac-address 000b.be52.2503</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.20.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip access-group 1 in</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip access-group 1 out</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan30</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">mac-address 000b.be52.2504</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.30.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan40</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">mac-address 000b.be52.2505</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.40.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan50</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">mac-address 000b.be52.2506</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.50.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan90</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">mac-address 000b.be52.2507</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.90.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan95</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">mac-address 000b.be52.2508</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.95.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">interface Vlan99</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">mac-address 000b.be52.2509</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip address 192.168.99.1 255.255.255.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">router rip</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">network 192.168.95.0</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip default-gateway 192.168.99.1</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip classless</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip route 192.168.15.0 255.255.255.0 192.168.90.2</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">ip flow-export version 9</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">!</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;">end</P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;"></P> <P style="-qt-block-indent: 0; text-indent: 0px; margin: 0px;"></P> Fri, 08 Mar 2019 19:43:00 GMT https://community.cisco.com/t5/switching/nat-problem/m-p/3092428#M388192 yskent0423 2019-03-08T19:43:00Z Hi https://community.cisco.com/t5/switching/nat-problem/m-p/3092429#M388193 <P>Hi</P> <P>It looks like a routing problem, have you verified if each layer 3 devices have the destination networks into their routing tables? including the networks used to interconnect each device.&nbsp;</P> Sat, 12 Aug 2017 03:07:22 GMT https://community.cisco.com/t5/switching/nat-problem/m-p/3092429#M388193 Julio E. Moisa 2017-08-12T03:07:22Z Hello, https://community.cisco.com/t5/switching/nat-problem/m-p/3092430#M388194 <P>Hello,</P> <P>in addition to Julio's post, upload the Packet Tracer file (zip it first to upload), that makes it easier to troubleshoot...</P> Sat, 12 Aug 2017 07:03:55 GMT https://community.cisco.com/t5/switching/nat-problem/m-p/3092430#M388194 Georg Pauwen 2017-08-12T07:03:55Z ok https://community.cisco.com/t5/switching/nat-problem/m-p/3092431#M388195 <P>ok</P> Sat, 12 Aug 2017 07:18:47 GMT https://community.cisco.com/t5/switching/nat-problem/m-p/3092431#M388195 yskent0423 2017-08-12T07:18:47Z Which of the PCs cannot reach https://community.cisco.com/t5/switching/nat-problem/m-p/3092432#M388196 <P>Which of the PCs cannot reach Server 0 ?</P> Sat, 12 Aug 2017 07:21:50 GMT https://community.cisco.com/t5/switching/nat-problem/m-p/3092432#M388196 Georg Pauwen 2017-08-12T07:21:50Z all of the PC, Multilayer https://community.cisco.com/t5/switching/nat-problem/m-p/3092433#M388197 <P>all of the PC, Multilayer switch, and Router 2</P> Sat, 12 Aug 2017 07:23:21 GMT https://community.cisco.com/t5/switching/nat-problem/m-p/3092433#M388197 yskent0423 2017-08-12T07:23:21Z There are numerous problems https://community.cisco.com/t5/switching/nat-problem/m-p/3092434#M388198 <P>There are numerous problems with your configuration. Vlan 15 on the Multilayer switch as network 192.168.15.0 configured, the same network exists on Router 0. Change your addressing so that it does not overlap.</P> <P>Also, Vlan 99 on the Multilayer switch has the same IP address as the connecting interface on Router 1, 192.168.99.1. Change that duplicate address as well...</P> Sat, 12 Aug 2017 08:25:02 GMT https://community.cisco.com/t5/switching/nat-problem/m-p/3092434#M388198 Georg Pauwen 2017-08-12T08:25:02Z Also, on R1 you have IP nat https://community.cisco.com/t5/switching/nat-problem/m-p/3092435#M388199 <P>Also, on R1 you have IP nat inside and outside interfaces configured, but there is nothing configured to be NATted.</P> <P>What are the requirements for this network ? Is this a lab ?</P> Sat, 12 Aug 2017 08:51:12 GMT https://community.cisco.com/t5/switching/nat-problem/m-p/3092435#M388199 Georg Pauwen 2017-08-12T08:51:12Z yes, it's a lab. The https://community.cisco.com/t5/switching/nat-problem/m-p/3092436#M388200 <P>yes, it's a lab. The requirements is all devices can ping each other, the configure I was done, just the device can't to ping, so I need to troubleshoot it. Thanks for your reply</P> Sun, 13 Aug 2017 03:45:29 GMT https://community.cisco.com/t5/switching/nat-problem/m-p/3092436#M388200 yskent0423 2017-08-13T03:45:29Z Hello, https://community.cisco.com/t5/switching/nat-problem/m-p/3092437#M388201 <P>Hello,</P> <P>the main problem is that you are using the same IP address space on different devices. Is this what the design is supposed to look like, and is the main purpose of the lab to use NAT ?</P> Sun, 13 Aug 2017 13:06:45 GMT https://community.cisco.com/t5/switching/nat-problem/m-p/3092437#M388201 Georg Pauwen 2017-08-13T13:06:45Z Hello https://community.cisco.com/t5/switching/nat-problem/m-p/3092438#M388202 <P>Hello</P> <UL> <LI>You have NAT enabled on RTR1 however at the same time you trying to advertise all networks to each other so why do you need NAT?</LI> </UL> <UL> <LI>you have ripv1 enabled on the rtr1-2 and the switch with auto summerisation enabled and as ripv1 is classful it will only advertise prefixes that match the subnet mask of its interface thats one reason why you routing isnt working correctly</LI> </UL> <UL> <LI>rtr2 AND the switch are performing intervlan routing not needed on both devices- plus you have duplicate addressing</LI> </UL> <UL> <LI>You have nat enabled on rtr1 and rtr2 but looking at your topology rtr and the switch are outside of rtr1 and the server, so just have nat on rtr1 for the server</LI> </UL> <P>Try the following for a NAT solution from rtr1<BR /><BR /><SPAN style="text-decoration: underline;"><STRONG>rtr1</STRONG></SPAN></P> <P>no router rip<BR />no ip nat inside source static 192.168.15.1 192.168.90.1<BR />no ip route 192.168.95.0 255.255.255.0 192.168.90.2<BR />no ip default-gateway 192.168.99.1<BR />no access-list 1 permit 0.0.0.1 255.255.255.0</P> <P>access-list 1 deny&nbsp; host 192.168.15.2<BR />access-list 1 permit 192.168.15.0</P> <P>ip nat inside source static tcp 192.168.15.2 80 192.168.90.1 80<BR />ip nat inside source list 1 interface Serial0/3/0</P> <P>ip route 0.0.0.0 0.0.0.0 192.168.90.2</P> <P><BR /><SPAN style="text-decoration: underline;"><STRONG>rtr2</STRONG></SPAN><BR />interface FastEthernet0/0<BR />no ip nat outside</P> <P>no ip route 192.168.15.0 255.255.255.0 192.168.90.1<BR />no ip default-gateway 192.168.99.1</P> <P>no int fa0/0.5<BR />no int fa0/0.10<BR />no int fa0/0.15<BR />no int fa0/0.20<BR />no int fa0/0.30<BR />no int fa0/0.40<BR />no int fa0/0.50<BR />no int fa0/0.88<BR />no int fa0/0.99<BR />defa int fa0/0</P> <P>int fa0/0<BR />ip address 192.168.95.2 255.255.255.0</P> <P>no router rip<BR />router rip<BR />passive interface default<BR />no passive interface fa0/0<BR />ver 2<BR />no auto<BR />network 192.168.95.0<BR />network 192.168.90.0</P> <P><BR /><STRONG><SPAN style="text-decoration: underline;">Switch</SPAN></STRONG><BR />no ip default-gateway 192.168.99.1<BR />no ip route 192.168.15.0 255.255.255.0 192.168.90.2<BR />no interface Vlan90</P> <P>interface Vlan20<BR />no ip access-group 1 in<BR />noip access-group 1 out</P> <P>int vlan 5<BR />ip address 192.168.5.1 255.255.255.0</P> <P>no router rip<BR />router rip<BR />passive interface default<BR />no passive interface vlan 95<BR />ver 2<BR />no auto<BR />network 0.0.0.0<BR /><BR />res<BR />Paul</P> <P></P> Sun, 13 Aug 2017 13:31:50 GMT https://community.cisco.com/t5/switching/nat-problem/m-p/3092438#M388202 paul driver 2017-08-13T13:31:50Z