cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
813
Views
10
Helpful
3
Replies

NAT config problem

net.PNG

 

 

ok so this is my network. I tried to config overload NAT on R1

FIX: R3 connect to R1 in f 3/0 and not f 2/0

R1 config:

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

 

!

upgrade fpd auto

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname R1

!

boot-start-marker

boot-end-marker

!

!

no aaa new-model

no ip icmp rate-limit unreachable

ip cef

!

!

!

!

no ip domain lookup

!

multilink bundle-name authenticated

!

!

!

!

!

!

!

!

!

!

!

!

!

!

archive

log config

hidekeys

!

!

!

!

ip tcp synwait-time 5

!

!

!

!

interface FastEthernet0/0

no ip address

shutdown

duplex half

!

interface ATM1/0

no ip address

shutdown

no atm ilmi-keepalive

!

interface FastEthernet2/0

no ip address

shutdown

duplex half

!

interface FastEthernet3/0

ip address 11.0.1.1 255.255.255.0

ip nat outside

duplex auto

speed auto

!

interface FastEthernet3/1

ip address 10.1.3.2 255.255.255.0

ip nat inside

duplex auto

speed auto

!

!

ip forward-protocol nd

ip route profile

ip route 0.0.0.0 0.0.0.0 11.0.1.2

no ip http server

no ip http secure-server

!

!

ip nat inside source list 1 interface FastEthernet3/0 overload

!

logging alarm informational

access-list 1 permit 10.1.3.0 0.0.0.255

no cdp log mismatch duplex

!

!

!

route-map WORD permit 10

description

description LINE

continue

!

!

!

control-plane

!

!

!

!

!

!

!

gatekeeper

shutdown

!

!

line con 0

exec-timeout 0 0

privilege level 15

logging synchronous

stopbits 1

line aux 0

exec-timeout 0 0

privilege level 15

logging synchronous

stopbits 1

line vty 0 4

login

!

!

end

 

 

 

 

R3 config:

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

!

 

!

upgrade fpd auto

version 12.4

service timestamps debug datetime msec

service timestamps log datetime msec

no service password-encryption

!

hostname R3

!

boot-start-marker

boot-end-marker

!

!

no aaa new-model

no ip icmp rate-limit unreachable

ip cef

!

!

!

!

no ip domain lookup

!

multilink bundle-name authenticated

!

!

!

!

!

!

!

!

!

!

!

!

!

!

archive

log config

hidekeys

!

!

!

!

ip tcp synwait-time 5

!

!

!

!

interface FastEthernet0/0

no ip address

shutdown

duplex half

!

interface ATM1/0

no ip address

shutdown

no atm ilmi-keepalive

!

interface FastEthernet2/0

no ip address

shutdown

duplex half

!

interface FastEthernet3/0

ip address 11.0.1.2 255.255.255.0

duplex auto

speed auto

!

interface FastEthernet3/1

ip address 11.0.0.2 255.255.255.0

duplex auto

speed auto

!

interface GigabitEthernet4/0

no ip address

shutdown

negotiation auto

!

interface Serial5/0

no ip address

shutdown

serial restart-delay 0

!

interface Serial5/1

no ip address

shutdown

serial restart-delay 0

!

interface Serial5/2

no ip address

shutdown

serial restart-delay 0

!

interface Serial5/3

no ip address

shutdown

serial restart-delay 0

!

interface Serial6/0

no ip address

shutdown

serial restart-delay 0

!

interface Serial6/1

no ip address

shutdown

serial restart-delay 0

!

interface Serial6/2

no ip address

shutdown

serial restart-delay 0

!

interface Serial6/3

no ip address

shutdown

serial restart-delay 0

!

interface Serial6/4

no ip address

shutdown

serial restart-delay 0

!

interface Serial6/5

no ip address

shutdown

serial restart-delay 0

!

interface Serial6/6

no ip address

shutdown

serial restart-delay 0

!

interface Serial6/7

no ip address

shutdown

serial restart-delay 0

!

ip forward-protocol nd

no ip http server

no ip http secure-server

!

!

!

logging alarm informational

no cdp log mismatch duplex

!

!

!

!

!

!

control-plane

!

!

!

!

!

!

!

gatekeeper

shutdown

!

!

line con 0

exec-timeout 0 0

privilege level 15

logging synchronous

stopbits 1

line aux 0

exec-timeout 0 0

privilege level 15

logging synchronous

stopbits 1

line vty 0 4

login

!

!

end

 

and the pc config:

set pcname PC-1

ip 10.1.3.4 10.1.3.2 24

 

 

when I ping from the pc to R3 i dont see any trafic on the line betwwen R1 to R3. the PC send the request to R1 and its stack there.

 

R1#sh ip nat translations
Pro Inside   global Inside local Outside local Outside global
icmp 11.0.1.1:22507 10.1.3.4:22507 11.0.1.2:22507 11.0.1.2:22507
icmp 11.0.1.1:23019 10.1.3.4:23019 11.0.1.2:23019 11.0.1.2:23019
icmp 11.0.1.1:23531 10.1.3.4:23531 11.0.1.2:23531 11.0.1.2:23531

 

the nat table look fie so were is the problem?

 

 

1 Accepted Solution

Accepted Solutions

Hello

you nat config looks fine the only thing that stands out is R3 ip address is configured on the wrong interface looking at the topology and you R3 configuration 

 

res

paul


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

View solution in original post

3 Replies 3

Hello

you nat config looks fine the only thing that stands out is R3 ip address is configured on the wrong interface looking at the topology and you R3 configuration 

 

res

paul


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

thenks, it solve one problem, now i can ping from R1 to R3 but somthing stiil dont work. I can't ping from the PC to R3. i can ping from R1 sorce 10.1.3.2 to R3 so the NAT work, but somthing else is broken.

Hello

Does your client have the correct ip addressing details

subnet mask /default gateway

res
Paul


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul