1710 w 12.2.15T using PPPoE with NAT to allow Branch office to connect to Verizon DSL network. Using NAT with static and reflective filters for protections. Basic configuration runs fine. Upgraded LAN from 10m to Catalist 2950 and wanted to segment Branch into two VLANs 1 and 10. 1710 Fa0 supports VLAN so changed configuration of FA from access to trunk with encap of 801.2q with two sub-interfaces on FA0. Don't believe any mis-match with the 2950. No problems at first - sessions looked ok. However, all sessions with TCP port > 32000 stopped working - NAT seemed to fail.. Ports < 32000 appeared to work. Removed the subinterfaces - removed the VLANs from the switch "back" to all VLAN1 - to all works.
Suggestions?
