Hello
Your nat configuration looks like it has statements that are not necessary, pointing to the wrong wan interface, conflicting access-list or ones that don’t even exist and multiple overload statements that just single one could accomplish?
Suggest the following:
no ip nat inside source route-map track-primary-if interface GigabitEthernet0/0/0 overload
no ip nat pool testnet 209.Y.Y.Y 209.Y.Y.Y netmask 255.255.255.192
no ip nat pool HbugPool 209.X.X.X 209.X.X.X netmask 255.255.255.192
no ip nat inside source list 1 interface GigabitEthernet0/0/0 overload
no ip nat inside source list 15 interface GigabitEthernet0/0/1 overload
no ip access-list standard 1
no ip access-list standard 10
no ip access-list standard 15
ip access-list standard10
deny(specfic lan subnet)
deny host 192.168.1.100
deny host 10.10.10.197
deny host 10.10.10.7
deny host 10.10.10.32
deny host 192.168.1.101
deny host 192.168.2.50
permit 10.0.0.0 0.255.255.255
permit 192.168.2.0 0.0.0.255
permit 192.168.1.0 0.0.0.255
permit 172.16.0.0 0.0.255.255
permit etc...
ip access-list standard newpat
permit (specfic lan subnet)
ip nat pool new-public-ip y.y.y.y y.y.y.y netmask x.x.x.x
ip nat inside source list newpat pool new-public-ip
Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.
Kind Regards
Paul
