01-22-2010 11:01 AM - edited 03-04-2019 07:16 AM
Hello fellows!
Just began to start with CISCO Router 2800, here is the sceme:
So, we have 2 interfaces on router:
FA 0/0 192.168.100.200 ( It is from the outside netowrk which provide me the internet, the Internet server is 192.168.100.100)
FA 0/1 192.168.80.1 (My new created subnet)
I set the default gateway of the router to: 192.168.100.100
Using the software of router (web itnerface) I configured NAT, he asked me the interface from the internet is comming (outside 192.168.100.0) and where I want to share it (incoming 192.168.80.0) - now the internet appeared and the skype is ON )))
So, look - 1 . I'm at my PC 192.168.80.2 ping the server 192.168.100.100 STATUS OK! (so the outside subnet is working), now pinging my subnet ( 192.168.80.3 here is another PC) STATUS OK!
2. Going to the server room (from SERVER 192.168.100.100) pinging my router interface 192.168.100.200 STATUS OK!
NOW THE TROUBLE> PINGING FROM THE SERVER 192.168.100.100 THE NEW CREATED SUBNET 192.168.80.2
there is no ping =((
Please help what should I do?
Solved! Go to Solution.
01-22-2010 12:35 PM
01-22-2010 02:04 PM
slash281990 wrote:
huh, hard to understand
ip nat inside source static {esp local-ip interface type number | local-ip global-ip} [extendable | mapping-id map-id | no-alias | no-payload | redundancy group-name | route-map | reversible | vrf name] [match-in-vrf]
is it right?
so I write
ip nat inside source static x.x.x.x
ip nat outside source static x.x.x.x
x.x.x.x - are the ip addreses
If the inside address was 192.168.5.10 and you wanted to present it as 172.16.5.10 to the outside -
ip nat inside source static 192.168.5.10 172.16.5.10
Jon
01-22-2010 11:52 AM
It's working as expected.
NAT is supposed to hide your inside subnet from the outside.
If you need reachability to devices in the inside from the outside, you need to create static NAT.
Regards
Edison.
01-22-2010 12:25 PM
can you provide me with a terminal command to do that please?
Thx a lot!
01-22-2010 12:35 PM
01-22-2010 01:14 PM
huh, hard to understand
ip nat inside source static {esp local-ip interface type number | local-ip global-ip} [extendable | mapping-id map-id | no-alias | no-payload | redundancy group-name | route-map | reversible | vrf name] [match-in-vrf]
so I write
ip nat inside source static x.x.x.x
ip nat outside source static x.x.x.x
x.x.x.x - are the ip addreses
01-22-2010 02:04 PM
slash281990 wrote:
huh, hard to understand
ip nat inside source static {esp local-ip interface type number | local-ip global-ip} [extendable | mapping-id map-id | no-alias | no-payload | redundancy group-name | route-map | reversible | vrf name] [match-in-vrf]
is it right?
so I write
ip nat inside source static x.x.x.x
ip nat outside source static x.x.x.x
x.x.x.x - are the ip addreses
If the inside address was 192.168.5.10 and you wanted to present it as 172.16.5.10 to the outside -
ip nat inside source static 192.168.5.10 172.16.5.10
Jon
01-22-2010 02:50 PM
what does it mean "as"?
my ouside is 192.168.100.100
inside: 192.168.80.1
I just want the inside to be seen from the outside.
so I have just to write:ip nat inside source static 192.168.80.1 ?
01-22-2010 02:57 PM
slash281990 wrote:
what does it mean "as"?
my ouside is 192.168.100.100inside: 192.168.80.1
I just want the inside to be seen from the outside.so I have just to write:ip nat inside source static 192.168.80.1 ?
Sorry, can you clarify
1) which interface has "ip nat outside" under it
2) which interface has "ip nat inside" under it
3) what exactly do you want to do ie. connect from which IP address to which IP address and do you want NAT involved ?
Jon
01-22-2010 03:02 PM
Just please checkout the first my post to view the situation...
thre is described..
I want to make 192.168.80.0 to be visible for 192.162.100.0 ( and all other networks that I will add later)
Thx Jon!
01-22-2010 03:20 PM
slash281990 wrote:
Just please checkout the first my post to view the situation...
thre is described..
I want to make 192.168.80.0 to be visible for 192.162.100.0 ( and all other networks that I will add later)
Thx Jon!
Okay so you don't need NAT.
The server, what is the default-gateway on it ? It should be the router interface 192.168.100.200.
Also you said you set the default-gateway on the router to be the server. The router doesn't need a default-gateway so if you have configured one can you remove it. The router must have "ip routing" enabled which it should do unless you disabled it.
Basically as long as the server has the default-gateway of 192.168.100.200 and the clients in vlan 80 have the default-gateway of 192.168.80.1 it should all work.
One other thing worth checking is whether you have personal firewalls on the clients that would stop ping requests.
I'm assuming you haven't configured access-lists on the router ?
Jon
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide