cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
223
Views
5
Helpful
4
Replies
Highlighted
Beginner

IR829 How to configure NAT

Hello All,

We have an IR829GW router.  I need to use it as a typical old school NAT router such that whatever devices are behind it use a NAT IP for the traffic that's going outbound ( For instance Internet access).  I have looked in the config guide and couldn't find any instructions regarding this. Secondly,  this device has a hyper-visor style architecture. Can someone educate me what is the purpose of creating a VM on such devices ?  What would be the use-case ?

 

My internal devices are connected to a L2 switch which in-turn will have a uplink from one of the interfaces of this IR829. My requirement is that all internet bound traffic originating from these internal devices should be Dynamic NAT'd or PAT  based on whatever NAT IP i assign.

 

THanks

 

Everyone's tags (2)
1 ACCEPTED SOLUTION

Accepted Solutions
VIP Mentor

Re: IR829 How to configure NAT

Hello,

 

the below should do it (important parts marked in bold). The IP address assigned to the VLAN 1 interface is arbitrary, if yours is different, you need to change the access list 1 to match the IP address space you are using.

 

version 15.6
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service internal
!
hostname 829
!
boot-start-marker
boot system flash:/ir800-universalk9-mz.SPA.156-3.M0a
boot-end-marker
!
no aaa new-model
ethernet lmi ce
service-module wlan-ap 0 bootimage autonomous
!
ignition off-timer 900
!
ignition undervoltage threshold 9
!
no ignition enable
!
no ip domain lookup
ip inspect WAAS flush-timeout 10
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
chat-script lte "" "AT!CALL" TIMEOUT 20 "OK"
!
license udi pid IR829-2LTE-EA-BK9 sn FGL2032219N
!
redundancy
notification-timer 120000
!
controller Cellular 0
lte sim data-profile 3 attach-profile 1
lte modem link-recovery rssi onset-threshold -110
lte modem link-recovery monitor-timer 20
lte modem link-recovery wait-timer 10
lte modem link-recovery debounce-count 6

interface GigabitEthernet0
no ip address
shutdown
!
interface GigabitEthernet1
no ip address
!
interface GigabitEthernet2
no ip address
!
interface GigabitEthernet3
no ip address
!
interface GigabitEthernet4
no ip address
!
interface Wlan-GigabitEthernet0
no ip address
!
interface GigabitEthernet5
description Uplink to WAN Router
ip address dhcp
ip nat outside
duplex auto
speed auto
!
interface Cellular0
no ip address
encapsulation slip
dialer in-band
dialer string lte
!
interface Cellular1
no ip address
encapsulation slip
!
interface wlan-ap0
no ip address
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
!
interface Async0
no ip address
encapsulation scada
!
interface Async1
no ip address
encapsulation scada
!
ip forward-protocol nd
!
ip http server
ip http secure-server
!
ip nat inside source list 1 interface GigabitEthernet5 overload
!
ip route 0.0.0.0 0.0.0.0 GigabitEthernet5
!
dialer-list 1 protocol ip permit
!
ipv6 ioam timestamp
!
access-list 1 permit 192.168.1.0
!
control-plane
!
line con 0
stopbits 1
line 1 2
stopbits 1
line 3
script dialer lte
no exec
transport preferred lat pad telnet rlogin lapb-ta mop udptn v120 ssh
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
rxspeed 150000000
txspeed 50000000

!
no scheduler max-task-time

4 REPLIES 4
VIP Mentor

Re: IR829 How to configure NAT

Hello,

 

are you using the IR829 as a cellular Internet router, and are you using the integrated wireless AP as well ? Post the config you currently have...

Beginner

Re: IR829 How to configure NAT

Hello Georg, This is a new device out of the box. Please find attached run config file. I am currently not using it as IR Router or AP. For now we just want to give devices behind it, access to internet using PAT . I will be connecting the Internet Uplink connection to it's WAN interface port.  The internal devices that i am referring to are connected to a L2 switch and this Switch is in turn connected to the GE1 (LAN) interface.   One dumb question if i may, I need to enable http web UI on this. Do i just run a "ip http-server" from the enable mode ?

 

 

Thanks in advance 

VIP Mentor

Re: IR829 How to configure NAT

Hello,

 

the below should do it (important parts marked in bold). The IP address assigned to the VLAN 1 interface is arbitrary, if yours is different, you need to change the access list 1 to match the IP address space you are using.

 

version 15.6
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
service internal
!
hostname 829
!
boot-start-marker
boot system flash:/ir800-universalk9-mz.SPA.156-3.M0a
boot-end-marker
!
no aaa new-model
ethernet lmi ce
service-module wlan-ap 0 bootimage autonomous
!
ignition off-timer 900
!
ignition undervoltage threshold 9
!
no ignition enable
!
no ip domain lookup
ip inspect WAAS flush-timeout 10
ip cef
no ipv6 cef
!
multilink bundle-name authenticated
!
chat-script lte "" "AT!CALL" TIMEOUT 20 "OK"
!
license udi pid IR829-2LTE-EA-BK9 sn FGL2032219N
!
redundancy
notification-timer 120000
!
controller Cellular 0
lte sim data-profile 3 attach-profile 1
lte modem link-recovery rssi onset-threshold -110
lte modem link-recovery monitor-timer 20
lte modem link-recovery wait-timer 10
lte modem link-recovery debounce-count 6

interface GigabitEthernet0
no ip address
shutdown
!
interface GigabitEthernet1
no ip address
!
interface GigabitEthernet2
no ip address
!
interface GigabitEthernet3
no ip address
!
interface GigabitEthernet4
no ip address
!
interface Wlan-GigabitEthernet0
no ip address
!
interface GigabitEthernet5
description Uplink to WAN Router
ip address dhcp
ip nat outside
duplex auto
speed auto
!
interface Cellular0
no ip address
encapsulation slip
dialer in-band
dialer string lte
!
interface Cellular1
no ip address
encapsulation slip
!
interface wlan-ap0
no ip address
!
interface Vlan1
ip address 192.168.1.1 255.255.255.0
ip nat inside
!
interface Async0
no ip address
encapsulation scada
!
interface Async1
no ip address
encapsulation scada
!
ip forward-protocol nd
!
ip http server
ip http secure-server
!
ip nat inside source list 1 interface GigabitEthernet5 overload
!
ip route 0.0.0.0 0.0.0.0 GigabitEthernet5
!
dialer-list 1 protocol ip permit
!
ipv6 ioam timestamp
!
access-list 1 permit 192.168.1.0
!
control-plane
!
line con 0
stopbits 1
line 1 2
stopbits 1
line 3
script dialer lte
no exec
transport preferred lat pad telnet rlogin lapb-ta mop udptn v120 ssh
transport output lat pad telnet rlogin lapb-ta mop udptn v120 ssh
rxspeed 150000000
txspeed 50000000

!
no scheduler max-task-time

Beginner

Re: IR829 How to configure NAT

Georg, Thank you very much. I will try it out on Monday and let you know.  Really appreciate your help

CreatePlease to create content
Content for Community-Ad
July's Community Spotlight Awards