NAT HELP

revilo3246 · ‎12-13-2005

Hi, pls. help me with this prob. I only want to access my server 192.16.1.170 behind a NAT router, from my PC 192.168.101.241 I can ping NAT router FE 0/1 192.168.74.3, however, I cannot ping FE 0/0 192.16.1.100. Kindly look at the attachment for the drawing and config. of my NAT router. Appreciate if you can teach me the right config. thanks.

spremkumar · ‎12-13-2005

Hi

Are you trying to access the inside server using any particulr port ?

if yes then you can do out a static port translation configured on the router.

That will take care of the access on that particular port.

ip nat inside source static tcp 192.16.1.170 80 192.168.74.3 80

If you want to access the inside ip irrespective of the port nos then i would suggest to use

one to one natting configured in ur router.

ip nat inside source static 192.16.1.170 192.168.74.x

192.168.74.x --- u can make use of any free ips available in that block

regds

Report Inappropriate Content · ‎12-14-2005

revilo3246 · ‎12-14-2005

thanks a lot, appreciate that..

do i need to add static route?

can i use 192.168.101.x instead for ip nat inside source static 192.16.1.170 192.168.74.x command?

Why would I use 192.168.74.x ?

spremkumar · ‎12-15-2005

Hi

Since you have deployed NAT over here and masking ur LAN behind with the WAN interface address you will have reachability only to the public(outside) interface.

so in this case you have to make use of 192.168.74.x series ip which you have configured in the outside interface.

BTW are you trying this out in a lab setup??

regds

revilo3246 · ‎12-19-2005

Hi

Actually its not a lab set up. I follow your instruction to inject the command ip nat inside source static 192.16.1.170 192.168.74.x using 192.168.74.5, but still I cannot even ping the host 192.16.1.170 from my PC (192.168.101.241) what do u think is the prob.? thanks kumar for continuously replying to my prob. appreciate it.

spremkumar · ‎12-21-2005

Hi

Sorry for the delayed reply.Once you are done with the static nat configs you need to ping up 192.168.74.5 ip instead of the inside local ip.

once you are thru in getting the icmp replied from this ip it does says that ur connectivity to the internal 192.16.1.170 is thru.

Then u can think of hosting any services on tht server and try accessing using 74.5 ip.

regds