I currently have an 877 set up at home and configured to use 1 of a possible 4 static IP's I have from my ISP, my ISP uses bridging instead of PPPoE so I have set up the 877 and its working as intended on NAT overload as I say on 1 of the 4 IP's. I wish to put my Tandberg VC on a seperate IP and put it in a DMZ, however when I set it up with a public IP using all my ISP settings and amend my access list it cannot get outside, Below is part of my running config
interface ATM0
mac-address xxxx.xxxx.xxxx
no ip address
ip virtual-reassembly
no atm ilmi-keepalive
dsl operating-mode auto
!
interface ATM0.192 point-to-point
description ADSL2+ BE Broadband
ip address xxx.xxx.xxx.192 255.255.252.0
ip nat outside
ip virtual-reassembly
atm route-bridged ip
pvc 0/101
oam-pvc manage
encapsulation aal5snap
!
!
interface FastEthernet0
description TO 3560 SWITCH
duplex full
speed 100
interface Vlan1
no ip address
ip tcp adjust-mss 1452
bridge-group 1
bridge-group 1 spanning-disabled
!
interface BVI1
ip address 10.1.0.254 255.255.255.0
ip nat inside
ip virtual-reassembly
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 188.220.248.1
no ip http server
no ip http secure-server
!
ip nat inside source list 102 interface ATM0.192 overload
!
access-list 102 permit ip 10.1.0.0 0.0.0.255 any
no cdp run
QUESTION:- should I just create 3 more sub-interfaces and 1 to 1 static NAT them or is there an easier/better way??
Thanks in advance!!
GC
