NAT Help

[cdc9850]

Hello,

I'm having difficulty getting PC9, which is on the outside of NAT rtr 3 to be able to communicate with the rest of the topology on the inside of the NAT. I'm not exactly sure where I'm going wrong but I think it is something to do with the translations and static routes I set.

Attached is the PTK file.

Thanks all!Routing

[Georg Pauwen]

Hello,

what are the requirements of your network, what are you trying to build ? You have multiple routers connected through layer 2 switches, which only works if all interfaces on all routers are in the same subnet. None of your routers (or clients) can reach Router3, so NAT never happens.

Clarify what your network is supposed to look like...

[cdc9850]

Hello,

Sorry about the lack of information - So switches 0&1 have 3 VLANs, which PCs 0-5 are split among, all of these are supposed to be able to communicate through RTRs 0&1 with static routes. PCs 6-8 are on their own network and also have to communicate with the PCs that are on the 3 VLANs (except for VLAN 101, which there is an ACL on RTR 2 to stop traffic). All of this works and now I am trying to add a NAT RTR to switch 1, where PC 9 is considered the "outside" of the network and can communicate with the rest of the inside network.  Also the interface (on the rtr) that connects RTR 3 to Switch 1 has the subnet of 200.200.203.252, so shouldn't it be reachable from the other RTRs?

[Georg Pauwen]

Hello,

Thanks for the clarification. The problem is that none of your routers or clients can even reach router 3. I'll lab this up and get back with you...

[cdc9850]

Sounds good, thank you!

[Georg Pauwen · Accepted solution]

Hello,

sorry for my late response, I am in GMT +1 (Amsterdam time).

it came down to one small error:

Switch 1

interface FastEthernet0/22

--> switchport mode access

--> switchport access vlan 103

This is how that port needs to be configured. Attached the revised, working project file.

[paul driver]

Hello
Please review attached file, Look at the nat configuration host 200.200.203.9 to see what has been done to provide reachability, This is the follow on from your previous request for static routing post - here