cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
291
Views
0
Helpful
1
Replies

Static NAT not working !

gcocchi
Level 1
Level 1

Hi.

I'm trying to configure static nat to connect a server on inside lan from outside.

interface FastEthernet0/0

ip address 7.0.11.205 255.255.240.0

no ip redirects

ip nat inside

no ip route-cache

no ip mroute-cache

duplex auto

speed auto

no cdp enable

!

interface FastEthernet0/1

ip address 10.60.0.250 255.255.255.0

no ip redirects

ip nat outside

no ip route-cache

no ip mroute-cache

duplex auto

speed auto

no cdp enable

!

ip nat translation timeout 3600

ip nat inside source list 1 interface FastEthernet0/1 overload

ip nat inside source static 7.0.14.1 10.60.0.222

access-list 1 permit 7.0.0.0 0.255.255.255

ip route 0.0.0.0 0.0.0.0 10.60.0.254

When i try to reach 10.60.0.222 form outside ip 192.168.111.77 no answer come to me.

Debugging i found:

ping 10.60.0.222

00:07:06: NAT: o: icmp (192.168.111.77, 2573) -> (10.60.0.222, 2573) [0]

00:07:06: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [0]

00:07:07: NAT: o: icmp (192.168.111.77, 2573) -> (10.60.0.222, 2573) [0]

00:07:07: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [0]

00:07:08: NAT: o: icmp (192.168.111.77, 2573) -> (10.60.0.222, 2573) [0]

00:07:08: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [0]

00:07:09: NAT: o: icmp (192.168.111.77, 2573) -> (10.60.0.222, 2573) [0]

00:07:09: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [0]

00:07:10: NAT: o: icmp (192.168.111.77, 2573) -> (10.60.0.222, 2573) [0]

00:07:10: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [0]

telnet 10.60.0.222 80

00:08:01: NAT: o: tcp (192.168.111.77, 34382) -> (10.60.0.222, 80) [26944]

00:08:01: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [26944]

00:08:07: NAT: o: tcp (192.168.111.77, 34382) -> (10.60.0.222, 80) [26945]

00:08:07: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [26945]

From the router i can reach all with a ping or a telnet.

Some hints please.

Thx.

1 Reply 1

Hello,

looking at your debug output, it appears that the server with IP address 7.0.14.1 is not responding. The correct output of the debug should look like this:

00:37:34: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [50]

00:37:34: NAT: s=7.0.14.1->10.60.0.222, d=192.168.111.77 [494]

00:37:34: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [51]

00:37:34: NAT: s=7.0.14.1->10.60.0.222, d=192.168.111.77 [495]

00:37:34: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [52]

00:37:34: NAT: s=7.0.14.1->10.60.0.222, d=192.168.111.77 [496]

00:37:34: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [53]

00:37:34: NAT: s=7.0.14.1->10.60.0.222, d=192.168.111.77 [497]

00:37:34: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [54]

00:37:34: NAT: s=7.0.14.1->10.60.0.222, d=192.168.111.77 [498]

Can you check if your server has the correct IP configuration, or any routes in the routing table that should not be there ? Make sure that the default gateway of the server is the IP address of your FastEthernet0/0, 7.0.11.205 (keeping in mind that the router could still reach the server even if the server had no default gateway at all configured...)

HTH,

Georg

http://www.solutionfinders.nl