NAT Help

keddans · ‎01-09-2002

192.168.21.xxx

---E----

|

----ROUTER A-----S0

|(P to P)

|

----ROUTER B-----S1

|

---E----172.20.1.xxx

|

----ROUTER C----- (Do Not have access) 52.99.xxx.xxx

I need help in how to make 192 series to map to 172 series to route to "router c" (172 series have wide open access) and have access to 52 series server. I guess NATing has to be done in "router b" but how?

Appericate you help and time.

MickPhelps · ‎01-09-2002

You could do:

interface serial 1

ip address ??.??.??.??

ip nat inside

!

interface ethernet 1

ip address 172.20.1.xxx 255.255.255.0

ip nat outside

!

ip nat inside source list 1 pool nat-pool

access-list 1 permit 192.168.0.0 0.0.255.255

ip nat pool nat-pool 172.20.1.128 172.20.1.254 netmask 255.255.255.0

I think I understood the problem correctly. Router B should NAT 192.168 addresses to 172.20.

Mick.

keddans · ‎01-10-2002

You got it buddy. Yup 100% right. Thats what I'm trying to achieve. I belive I should put the configuration in router B which I did but no use. I still can't ping to 52.99.xxx.xxx. When I do the trace route its going on to public route(s1) to my ISP(Interoffice T1).

What should I do now?

MickPhelps · ‎01-10-2002

Do you have a route on router B to 52.99.x.x that has a next hop of Router C?

Mick.

keddans · ‎01-10-2002

I don't think so.

keddans · ‎01-10-2002

I don't think so.

do I need to add like this

ip route 52.99.xxx.xxx 255.255.255.255 FastEthernet0 172.20.1.254

MickPhelps · ‎01-10-2002

close

ip route 52.99.0.0 255.255.0.0 172.20.1.254

Mick.

keddans · ‎01-10-2002

Getting RTO's now when i ping 52.99.xxx.xxx address from 192.168.21.xxx machine (hops to S1(router b) and then i get RTO's). Before we added ip route used to go to my ISP.

MickPhelps · ‎01-10-2002

Does router B have a route back to 192.168?

Mick.

keddans · ‎01-10-2002

does this line make sense

ip route 192.168.21.0 255.255.255.0 s0(router A ISP ip address, interoffice)

MickPhelps · ‎01-10-2002

Yes. After Router B NATs the packet back to 192.168, it needs to know where to send it.

Mick.

keddans · ‎01-10-2002

ip route for 192.168 already exsists but still i get this RTO's

Appericate your time and help. Thank you.

MickPhelps · ‎01-10-2002

Wish it was working.

E-mail me directly if you need help.

mickey.phelps@butler.com

Mick.

keddans · ‎01-10-2002

thanx a lot. thank you.

keddans · ‎01-10-2002

Problem sloved by adding below access-list to do reset of NATing

access-list 1 permit 172.22.0.0 0.0.255.255

(172.22.xxx.xxx interoffice point-to-point)