cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
331
Views
1
Helpful
8
Replies

Getting NAT Translations but no internet

Alkemyst1971
Level 1
Level 1

This is my router config:

interface GigabitEthernet0/0.168
description Security Desk
encapsulation dot1Q 168
ip address 192.168.0.1 255.255.255.0
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly in

ip nat inside source route-map SECURITY_DESK interface GigabitEthernet0/0.168 overload

route-map SECURITY_DESK permit 10
match ip address 168

ip route 192.168.0.0 255.255.255.0 PUBLIC_IP

access-list 168 permit ip 192.168.0.0 0.0.0.255 any


It's building translations, but somehow the traffic is not leaving the router for the internet.  What am I doing wrong?

 

EDIT:  I notice I am getting a 192.168.0.1 address for my inside global instead of a public IP.  Not sure why that is happening.

 

 

 

8 Replies 8

You need to use 

Ip nat outside 

Not 

Ip nat inside 

Under this interface 

MHM

Thanks, but I caught was I did.  The inside interface is correct, however; I needed to nat back to my outside interface.

 

I dont get your comment 

It mandatory to use 

Ip nat outside 

Under interface use for NAT overload

MHM

My full config:

interface GigabitEthernet0/0.168
description Security Desk
encapsulation dot1Q 168
ip address 192.168.0.1 255.255.255.0
ip flow ingress
ip flow egress
ip nat inside
ip virtual-reassembly in
!
interface GigabitEthernet0/2.423
description Causeway Sec_desk Handoff
encapsulation dot1Q 423
no ip vrf forwarding verity-1001
ip address PUBLIC_IP.262 255.255.255.252
ip nat outside
ip virtual-reassembly in
!
ip nat inside source route-map SECURITY_DESK interface GigabitEthernet0/2.423 overload

route-map SECURITY_DESK permit 10
match ip address 168

ip route 192.168.0.0 255.255.255.0 PUBLIC_IP.161

access-list 168 permit ip 192.168.0.0 0.0.0.255 any

 

ip route 0.0.0.0 0.0.0.0 PUBLIC_IP.161

This need

MHM

default route is a different circuit.  It's all working now.

 

Glad your issue solved 

Have a nice day

MHM

Hello
Example base on your OP:

int x.x
no shut
int x.x.168
encapsulation dot1Q 168
description  WAN
ip address 1.1.1.1 255.255.255.252
ip nat outside

int x.x
description  LAN
ip address 192.168.0.1 255.255.255.0
ip nat inside

ip access-list extended 168
permit ip 192.168.0.0 0.0.0.255 any

route-map LAN
match ip address 168

ip nat inside source route-map LAN interface <WAN> overload
ip route 0.0.0.0 0.0.0.0 <WAN interface> 1.1.1.2


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul
Review Cisco Networking for a $25 gift card