Help with Static NAT!!!

[Kasiraman S]

Hello All,

I'm working with my lab router 1760 and I have two PC sitting behind that(INSIDE). My RTR acting as a EzVPN server and help the roaming clients access the server remotelly through client VPN. I would also like to configure static NAT to access the 2 Pcs sitting behind the RTR through unencrypted traffic(In case if people cant use VPN)

If I add the static NAT entry to allow the traffic from the internet, it causing issue for my VPN clients, because always the static NAT is taking effect and causing the reverse traffic from PC not able to reach the VPN clients. I'm not able to exempt the traffic from PC to EzVPN client IP in the NAT entry. Please help me in solve the problem.

Please find the topology for reference and let me know if you require any further information.

Thanks,

Kasi

[andrew.prince · Accepted solution]

You just need to configure a no-nat rule for the traffic from the PC's to the DHCP pool of addresses for the VPN client.

And 2 static NAT's for the PC's when they access anything not from the DHCP pool for the VPN Client.

HTH>

[Kasiraman S]

Hi Andrew,

Thanks for your input. But i do not understand about the no-nat. Are you asking me to add any ACL to deny the traffic from PC to VPN Client's IP.

Now I got some idea now,

Can I use the below command, would that help

__________________________________________________________________________

ip nat inside source static tcp 3389 3381 route-map RDP

!

route-map RDP permit 10
match ip address RDP

!

ip access-list exten RDP

10 deny ip

20 permit ip any

PLEASE ADIVCE.

Great thanks,

Kasi

[andrew.prince]

That is a possible way -  I personally would go with a route-map, for me it enables a more granular way of flexibility for translation.

JMTPW

HTH>

[Latchum Naidu]

Hi Kasi,

You need to use different seperate public IP for NAT.
And for your eazy vpn the Ip should be different one.

Please configure your NAT statement like below and see.
ip nat inside source static 10.10.10.10 202.202.202.202 extendable

Please rate the helpfull posts.

Regards,
Naidu.