Hello
@paul driver wrote:
The DHCP on vlan103 is used cause the Ethernet connected to G1/0/2 belongs to a private IP range of 192.168.100.0/24. The NAT and routing of that IP range is done behind the switch that I am working on. This IP range is just a guest net, whatever you plug to that you have internet. I am interested only to allow the internal Vlan199 to have internet as well
So what you are trying to do is double nat your vlan 199 by routing everything upstream to 192.168.100.0/24 nat subnet
From that device running the 192.168.1000/24 but at the same time trying to negate nat between certain subnets but nat everything else.
The problem you have is the default route on that switch is pointing everything towards that nat subnet, and your then leaving that nat subnet device to route between all you other subnets
What you can do is create an additional svi on that switch and connect it via another port/trunk towards the L3 device of your network, have a summarised static route pointing to the nexthop of that new svi
This way, any default traffic "internet" will go via the vlan 103 and get network translated and the more specific traffic for you internal subnets will route via the new SVI you have created and not get natted.
Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.
Kind Regards
Paul
