NAT interface accessibility
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-20-2010 11:13 AM - edited 03-04-2019 10:11 AM
I have a router with the following 2 interfaces:
interface Vlan1
description "192_Network"
ip address 192.168.1.253 255.255.255.0
ip nat inside
ip virtual-reassembly
interface FastEthernet4
description "172_Network"
ip address 172.16.1.253 255.255.255.0
ip mask-reply
ip nat outside
ip virtual-reassembly
no cdp enable
The NAT statement we use so specific traffic from 192 gets translated to 172:
ip nat inside source static 192.168.1.1 interface FastEthernet4
NAT works fine and has no issues. The problem is FastEthernet4 (172.16.1.253) is my switch management IP as well, and I can no longer ssh into the interface on my LAN to manage the switch. Any ideas?
- Labels:
-
Other Routing
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-20-2010 11:55 AM
Do you get to the fa4 interface via vlan 1 ?
Jon
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-20-2010 12:13 PM
No, FE4 is connected directly to our inside switched network, while the VLAN1 interface connects to another entity.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-20-2010 12:25 PM
Then i can't see why this wouldn't work. If you had a static NAT statement i could understand. If i get the chance i'll lab it up and see what happens.
Jon
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-20-2010 12:43 PM
It is a static NAT.
ip nat inside source static 192.168.1.1 interface FastEthernet4
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
10-20-2010 12:53 PM
hi,
you can use fallowing config and access router on secondary ip .
interface FastEthernet4
description "172_Network"
ip address 172.16.1.253 255.255.255.0
ip address 172.16.1.252 255.255.255.0 secondary
ip nat outside
ip nat inside source static 192.168.1.1 172.16.1.253
Regards,
Muammer
