cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
696
Views
0
Helpful
3
Replies

HWIC-4ESW and NAT

mcolley
Level 1
Level 1

Hello All,

I have a Cisco 2821, I am looking for some resources to assist my endeavors configuring NAT (inbound to outbound access) on the HWIC-4ESW.

Currently the internal clients cannot access the internet. Here are my interfaces and config:

GigabitEthernet0/0: 77.77.77.77

Description: "Public Interface"

NAT Outside

FastEthernet0/0/0: 10.2.12.1

NAT Inside

VLAN 3

FastEthernet0/0/1: 10.3.12.1

NAT Inside

VLAN 2

ip nat inside source list 7 interface GigabitEthernet0/0 overload

ip nat pool ovrld 77.77.77.77 77.77.77.77 prefix 28

access-list 7 permit 10.2.12.1 0.0.0.100

access-list 7 permit 10.2.13.1 0.0.0.100

I am able to ping the public interface from the inside networks, and when looking into th translation table, nothing is listed there. Am I missing something in the config for the HWIC-4ESW ?

Many Thanks for any insight you can offer,

3 Replies 3

Jon Marshall
Hall of Fame
Hall of Fame

What are the subnet masks associated with the clients. Is there any reason why the mask is 0.0.0.100 in your acl 7. Could you explain this bit ?

Also i'm assuming this is not in use

ip nat pool ovrld 77.77.77.77 77.77.77.77 prefix 28

Jon

The subnet masks on the clients are 255.255.255.0, and no - the IP address of 77.77.77.77 is not in use.

change

access-list 7 permit 10.2.12.1 0.0.0.100

access-list 7 permit 10.2.13.1 0.0.0.100

to

access-list 7 permit 10.2.12.0 0.0.0.255

access-list 7 permit 10.2.13.0 0.0.0.255

Edit - there is also a typo in either your interface config or your acl - is it 10.2.13.x or 10.3.12.x ?. Just make sure they match.

Jon

Review Cisco Networking for a $25 gift card