Configuring New Interface and NAT on Cisco 1900 Series Router.

[kampamba1]

Hello Cisco Team,

am asking for advise on how to how setup NAT rules and overload on my 2nd interface on my cisco 1900 series router,am not sure where am getting it wrong.

my router has 2 interface, interface one has IP address 10.5.5.5X and plugs into my ASA firwall and into my switch and works just fine.

i have just configured my second Interface with a new IP 172.16.0.X- i  want to NAT my new IP address to our public IP address which is 41.77.X.X

my configuration so far are as follows.

GigabitEthernet0/0         172.16.0.X      YES manual up                    up - Not working                                                                            

GigabitEthernet0/1         10.5.5.X      YES NVRAM  up                    up- this works fine

GigabitEthernet0/0/0       41.77.X.X  YES NVRAM  up                    up   

[Jon Marshall]

It's not clear what your topology is ie. is the new subnet going to sit behind the router but in front of the ASA ?

And is the router already do NAT overload for the 10.5.5.x subnet ?

Perhaps you can clarify and post your current router configuration.

Jon

[kampamba1]

Hello Jon,

Thanks for your feedback, my router configuration are as follows.

 interface GigabitEthernet0/0
 description WL2504
 ip address 172.16.0.2 255.255.254.0
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 description WAN
 ip address 10.55.55.2 255.255.255.252
 ip nat inside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface GigabitEthernet0/0/0
 description LINK TO CLT INTERNET
 ip address 41.X.X.130 255.255.255.248
 ip nat outside
 ip virtual-reassembly in
 duplex full
 speed 100
 media-type sfp

ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface GigabitEthernet0/0/0 overload
ip route 0.0.0.0 0.0.0.0 41.X.X.129
ip route 41.X.X.136 255.255.255.248 10.55.55.1
ip route 192.168.0.0 255.255.255.0 10.55.55.1
!
access-list 1 permit 10.55.55.0 0.0.0.255
access-list 1 permit 192.168.0.0 0.0.0.255
access-list 1 permit 192.168.1.0 0.0.0.255
!

from the router interface  interface GigabitEthernet0/0- I will connect it to my wireless Controller WL 2504

[Jon Marshall · Accepted solution]

Just add the 172.16.0.0/23 subnet to your existing acl.

Jon