09-17-2004 07:57 AM - edited 03-02-2019 06:34 PM
Hi.
I'm trying to configure static nat to connect a server on inside lan from outside.
interface FastEthernet0/0
ip address 7.0.11.205 255.255.240.0
no ip redirects
ip nat inside
no ip route-cache
no ip mroute-cache
duplex auto
speed auto
no cdp enable
!
interface FastEthernet0/1
ip address 10.60.0.250 255.255.255.0
no ip redirects
ip nat outside
no ip route-cache
no ip mroute-cache
duplex auto
speed auto
no cdp enable
!
ip nat translation timeout 3600
ip nat inside source list 1 interface FastEthernet0/1 overload
ip nat inside source static 7.0.14.1 10.60.0.222
access-list 1 permit 7.0.0.0 0.255.255.255
ip route 0.0.0.0 0.0.0.0 10.60.0.254
When i try to reach 10.60.0.222 form outside ip 192.168.111.77 no answer come to me.
Debugging i found:
ping 10.60.0.222
00:07:06: NAT: o: icmp (192.168.111.77, 2573) -> (10.60.0.222, 2573) [0]
00:07:06: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [0]
00:07:07: NAT: o: icmp (192.168.111.77, 2573) -> (10.60.0.222, 2573) [0]
00:07:07: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [0]
00:07:08: NAT: o: icmp (192.168.111.77, 2573) -> (10.60.0.222, 2573) [0]
00:07:08: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [0]
00:07:09: NAT: o: icmp (192.168.111.77, 2573) -> (10.60.0.222, 2573) [0]
00:07:09: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [0]
00:07:10: NAT: o: icmp (192.168.111.77, 2573) -> (10.60.0.222, 2573) [0]
00:07:10: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [0]
telnet 10.60.0.222 80
00:08:01: NAT: o: tcp (192.168.111.77, 34382) -> (10.60.0.222, 80) [26944]
00:08:01: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [26944]
00:08:07: NAT: o: tcp (192.168.111.77, 34382) -> (10.60.0.222, 80) [26945]
00:08:07: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [26945]
From the router i can reach all with a ping or a telnet.
Some hints please.
Thx.
09-18-2004 07:59 AM
Hello,
looking at your debug output, it appears that the server with IP address 7.0.14.1 is not responding. The correct output of the debug should look like this:
00:37:34: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [50]
00:37:34: NAT: s=7.0.14.1->10.60.0.222, d=192.168.111.77 [494]
00:37:34: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [51]
00:37:34: NAT: s=7.0.14.1->10.60.0.222, d=192.168.111.77 [495]
00:37:34: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [52]
00:37:34: NAT: s=7.0.14.1->10.60.0.222, d=192.168.111.77 [496]
00:37:34: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [53]
00:37:34: NAT: s=7.0.14.1->10.60.0.222, d=192.168.111.77 [497]
00:37:34: NAT: s=192.168.111.77, d=10.60.0.222->7.0.14.1 [54]
00:37:34: NAT: s=7.0.14.1->10.60.0.222, d=192.168.111.77 [498]
Can you check if your server has the correct IP configuration, or any routes in the routing table that should not be there ? Make sure that the default gateway of the server is the IP address of your FastEthernet0/0, 7.0.11.205 (keeping in mind that the router could still reach the server even if the server had no default gateway at all configured...)
HTH,
Georg
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide