NAT ACL Problem

[gauravprakash]

ip nat inside source list 97 interface Serial0/0.3 overload

ip nat inside source list 98 interface Serial0/0.2 overload

Static routes have been added for all networks. S0/0.3 is the default gateway. Both the subinterface have "ip nat outside" , also on the major interface.

Even if I add my IP in both the ACL 97 & 98, my packets go through S0/0.3. i am unable to reach to the network connected through S0/0.2.

Had there been different major interface, this would not have been a problem. ! I think so.

I need to remove IP from ACL 97 to reach to network through S0/0.2

Please explain......

[paddyxdoyle]

Can you see any entries in the NAT table "show ip nat translation" when you attempt a connection, or what output do you see from "debug ip nat"

The NAT FAQ states that NAT can be applied to sub interfaces

Q. Can Cisco IOS NAT be applied to sub-interfaces?

A. Yes. Source and/or destination NAT translations can be applied to any interface or sub-interface having an IP address (including dialer interfaces).

Thanks

PD

[tekha]

You need to specify that only packets traversing S0/0.3 should be NAT'ted to the IP address on S0/0.3,and vice versa.

interface Serial0/0

no ip address

!

interface Serial0/0.2

ip address ?

ip nat outside

!

interface Serial0/0.3

ip address ?

ip nat outside

!

interface Ethernet 0/0

ip address ?

ip nat inside

!

ip nat inside source route-map Serial0/0.2 interface Serial0/0.2 overload

ip nat inside source route-map Serial0/0.3 interface Serial0/0.3 overload

!

access-list 97 remark ** Used for NAT overload on s0/0.3 **

access-list 97 permit "whatever"

access-list 98 remark ** Used for NAT overload on S0/0.2 **

access-list 98 permit "whatever"

!

route-map Serial0/0.2 permit 10

match ip address 98

match interface Serial0/0.2

!

route-map Serial0/0.3 permit 10

match ip address 97

match interface Serial0/0.3

Please let us know if it works.

[gauravprakash]

Thanks Tekha & PD for ur replies.

I thought routemaps should e used, but did not know to apply to NAT statement.

Thanks it should resolve the case.

Thanks & regards,

Gaurav Prakash