Hi all
Trying to simulate the lab on my course but cannot get static nat to work.
Set up is as follows -
access-list INBOUND line 8 extended permit tcp host 10.14.253.2 host 10.0.1.222
access-list SVR-INIT line 8 extended permit tcp host 10.0.3.2 any
class-map match-all LNX-SOURCED
2 match source-address 10.0.3.2 255.255.255.255
class-map type management match-any REMOTE-ACCESS
2 match protocol icmp any
3 match protocol telnet any
4 match protocol ssh any
5 match protocol https any
6 match protocol http any
7 match protocol xml-https any
policy-map type management first-match MGMT_TEST
class REMOTE-ACCESS
permit
policy-map multi-match SVR-NAT
class LNX-SOURCED
nat static 10.0.1.222 netmask 255.255.255.255 vlan 100
interface vlan 100
ip address 10.0.1.1 255.255.255.0
access-group input INBOUND
service-policy input MGMT_TEST
no shutdown
interface vlan 300
ip address 10.0.3.1 255.255.255.0
access-group input SVR-INIT
service-policy input MGMT_TEST
service-policy input SVR-NAT
no shutdown
ip route 0.0.0.0 0.0.0.0 10.0.1.2
the vlans are up and up
but no xlate and i cannot ping 10.0.1.222 from anywhere.
i can ping 10.0.1.1 from 10.14.253.2
i have basically copied this from the test plans so any clues as to why its not working would be appreciated
Steve
