09-26-2024 02:05 AM
Hi all, I have a Cisco 2960 switch running IOS 15.2(7) E7. I configured NAT overload.
Straight forward config:
interface Vlan150
description INSIDE-LAN
ip address 10.150.0.254 255.255.255.0
ip nat inside
!
interface Vlan192
description OUTSIDE-LAN
ip address 192.168.0.254 255.255.255.0
ip nat outside
!
ip access-list standard NAT-LIST
permit 10.150.0.0 0.0.255.255
!
ip nat inside source list NAT-LIST interface Vlan192 overload
NAT doesn't work when a device on the 10.150.x.x network (default gateway is 10.150.0.254) tries to reach the Internet.
However, if I source a PING from 10.150.0.254, it works fine:
SW1#ping 8.8.8.8 source 10.150.0.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.150.0.254
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/20/25 ms
SW1#
SW1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 192.168.0.254:1024 10.150.0.254:3 8.8.8.8:3 8.8.8.8:1024
SW1#
I have verified using traceroute that the PC on the 10.150.x.x network is indeed going to SW1 in order to get to 8.8.8.8.
Any ideas please?
09-26-2024 04:21 AM
Hello
Just to confirm if am understanding - you have a 2960 switch performing NAT - correct?
09-26-2024 04:24 AM
Just to confirm if am understanding - you have a 2960 switch performing NAT - correct?
09-26-2024 04:50 AM
Friend
Just to make you notice your reply is double and one of reply without profile photo' contact manager if you want
MHM
09-26-2024 05:51 AM
Hello @MHM Cisco World
FYI its due to having dual cco accounts and flipping between them, as such my browser(s) cannot keep up.
cheers..
09-26-2024 11:31 AM - edited 09-26-2024 11:44 AM
Yes. That is correct. Its in a lab environment. Does everything we need but NAT. Didn't really want to add a router to perform just one function.
09-26-2024 11:40 AM
ip access-list standard NAT-LIST
permit 10.150.0.0 0.0.255.255
Correct this to be
ip access-list standard NAT-LIST
permit 10.150.0.0 0.0.0.255
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide