Cisco 2960 switch NAT

[Kane Smith]

Hi all, I have a Cisco 2960 switch running IOS 15.2(7) E7. I configured NAT overload.

Straight forward config:

interface Vlan150
description INSIDE-LAN
ip address 10.150.0.254 255.255.255.0
ip nat inside
!
interface Vlan192
description OUTSIDE-LAN
ip address 192.168.0.254 255.255.255.0
ip nat outside
!
ip access-list standard NAT-LIST
permit 10.150.0.0 0.0.255.255
!
ip nat inside source list NAT-LIST interface Vlan192 overload

NAT doesn't work when a device on the 10.150.x.x network (default gateway is 10.150.0.254) tries to reach the Internet.

However, if I source a PING from 10.150.0.254, it works fine:

SW1#ping 8.8.8.8 source 10.150.0.254
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
Packet sent with a source address of 10.150.0.254
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 16/20/25 ms
SW1#

SW1#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 192.168.0.254:1024 10.150.0.254:3 8.8.8.8:3 8.8.8.8:1024
SW1#

I have verified using traceroute that the PC on the 10.150.x.x network is indeed going to SW1 in order to get to 8.8.8.8.

Any ideas please?

[MHM Cisco World]

You need to use /24 but 

As other answer you' not all SW support NAT

Change the platform to router and run same NAT 

Note:- if you use router I dont think it support vlan SVI so you need to use router port

MHM

[Kane Smith]

So I really need a small lab device with these features:

- Small switch 8 or 12 ports (to remove the fan noise)

- Gig Ethernet ports

- PoE

- dot1x

- NAT

- IOS 15

My little 2960 does all of the above except NAT.

[MHM Cisco World]

Friend I answer you above check it' 

MHM

[paul driver · Accepted solution]

Hello
That make sense its a lab simulation as on real hardware of 2960s they do NOT support nat

[MHM Cisco World]

Friend @Kane Smith

I Check many times these SW don't support NAT as @paul driver @Giuseppe Larosa  mention

And what we see traffic generate from device itself is NAT it can bug in software you use for emulated.

So don't waste your time 

Use router Instead of SW and run NAT

MHM