cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1786
Views
10
Helpful
3
Replies

Assigning nat inside source list nat-overload to another interface

alee0786
Level 1
Level 1

Hi all! 

 

We have NAT Overload setup on Cisco 887 router as follows:

ip nat inside source list nat-overload interface Dialer1 overload 

ip nat inside source static tcp 10.10.27.1 443 interface Dialer1 443

ip route 0.0.0.0 0.0.0.0 Dialer1

ip route 172.17.99.0 255.255.255.0 172.17.44.54

ip route vrf PRISMA 0.0.0.0 0.0.0.0 172.89.32.11

ip route vrf PRISMA 172.89.34.78 255.255.255.255 Tunnel457


The interface is now changed to Vlan2 instead of Dialer1. Also a new static route (0.0.0.0 0.0.0.0 dhcp) would be entered. What is the best way to update the NAT Overload setup? 

 

 

1 Accepted Solution

Accepted Solutions

Hello,

 

first of all (obviously) change

nat-overload

access list to reflect the new IP subnet of Vlan 2.

 

Then, I would follow the sequence below:

 

887#clear ip nat translation *
887#conf t
887(config)#interface Dialer 1
887(config-if)#no ip nat outside
887(config-if)#exit
887(config)#no ip nat inside source list nat-overload interface Dialer1 overload
887(config)#no ip nat inside source static tcp 10.10.27.1 443 interface Dialer1 443
887(config)#no ip route 0.0.0.0 0.0.0.0 Dialer1
887(config)#interface Vlan 2
887(config-if)#ip nat outside
887(config-if)#exit
887(config)#ip nat inside source list nat-overload interface Vlan2 overload
887(config)#ip nat inside source static tcp 10.10.27.1 443 interface Vlan2 443
887(config)#ip route 0.0.0.0 0.0.0.0 dhcp

View solution in original post

3 Replies 3

balaji.bandi
Hall of Fame
Hall of Fame

Try Route :

 

ip route 0.0.0.0 0.0.0.0 dhcp

 

change dialer to vlanX that should work for you.

 

Test and advise any issue

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

Hello,

 

first of all (obviously) change

nat-overload

access list to reflect the new IP subnet of Vlan 2.

 

Then, I would follow the sequence below:

 

887#clear ip nat translation *
887#conf t
887(config)#interface Dialer 1
887(config-if)#no ip nat outside
887(config-if)#exit
887(config)#no ip nat inside source list nat-overload interface Dialer1 overload
887(config)#no ip nat inside source static tcp 10.10.27.1 443 interface Dialer1 443
887(config)#no ip route 0.0.0.0 0.0.0.0 Dialer1
887(config)#interface Vlan 2
887(config-if)#ip nat outside
887(config-if)#exit
887(config)#ip nat inside source list nat-overload interface Vlan2 overload
887(config)#ip nat inside source static tcp 10.10.27.1 443 interface Vlan2 443
887(config)#ip route 0.0.0.0 0.0.0.0 dhcp

Hi Georg, 

 

I was able to follow the above configuration and make the change from interface Dialer1 to interface Vlan2. 

 

Thank you!