cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1384
Views
5
Helpful
15
Replies

NAT problem I think

Dale_Bosley
Level 1
Level 1

I have 2 Cisco 1720 routers connected over a T1 line I can ping the inside interface of either router from the outside interface of the other, but I cannot ping from an inside interface to an inside interface I am attaching the show run from each router, the names have been changed to protect the innocent ;-)

Router A#sh ru

Building configuration...

Current configuration : 1033 bytes

version 12.2

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

hostname Router A

enable secret xxx

memory-size iomem 25

ip subnet-zero

ip name-server 205.171.3.65

ip name-server 205.171.2.65

interface FastEthernet0

ip address 192.168.0.4 255.255.255.0

ip nat inside

speed auto

interface Serial0

ip address 192.168.101.1 255.255.255.0

ip nat outside

no fair-queue

service-module t1 clock source internal

service-module t1 timeslots 1-24

ip nat inside source list 131 interface Serial0 overload

ip classless

ip route 0.0.0.0 0.0.0.0 192.168.0.1

ip route 10.6.18.0 255.255.255.0 192.168.101.2

ip http server

access-list 2 permit 10.6.18.0 0.0.0.255

access-list 4 permit 192.168.0.0 0.0.0.255

access-list 5 permit 192.168.101.0 0.0.0.255

arp 10.6.18.5 00c0.b607.d30b ARPA

arp 10.6.18.1 0010.e004.6ccb ARPA

line con 0

logging synchronous

line aux 0

line vty 0 4

absolute-timeout 60

login

no scheduler allocate

end

========================================

Router B#sh ru

Building configuration...

Current configuration : 1453 bytes

version 12.2

service timestamps debug uptime

service timestamps log uptime

no service password-encryption

hostname Router B

enable secret xxx

memory-size iomem 25

ip subnet-zero

ip name-server 205.171.3.65

ip name-server 205.171.2.65

interface Tunnel1

no ip address

interface FastEthernet0

ip address 10.6.18.4 255.255.255.0

ip nat inside

speed auto

interface Serial0

ip address 192.168.101.2 255.255.255.0

ip accounting output-packets

ip nat outside

no fair-queue

service-module t1 clock source internal

service-module t1 timeslots 1-24

interface Serial1

ip address 192.168.100.4 255.255.255.0

ip accounting output-packets

ip nat outside

no fair-queue

service-module t1 timeslots 1-24

ip classless

ip forward-protocol udp 5631

ip forward-protocol udp 5632

ip route 0.0.0.0 0.0.0.0 10.6.18.2

ip route 192.168.1.0 255.255.255.0 192.168.100.3

ip route 192.168.1.0 255.255.255.0 192.168.100.1

ip http server

access-list 1 permit 192.168.0.0 0.0.0.255

access-list 2 permit 10.6.18.0 0.0.0.255

access-list 3 permit 192.168.100.0 0.0.0.255

access-list 4 permit 192.168.1.0 0.0.0.255

access-list 5 permit 192.168.101.0 0.0.0.255

access-list 121 permit ip 192.168.0.0 0.0.255.255 any

access-list 130 permit ip any host 10.6.18.1

arp 10.6.18.5 00c0.b607.d30b ARPA

line con 0

logging synchronous

line aux 0

line vty 0 4

session-timeout 60

absolute-timeout 60

login

end

If you see anything I need to try please let me know.

Thanks

Dale

15 Replies 15

OK I guess I still need NAT. I can ping from the LAN interface on B through router A to the LAN interface on C. But I cannot get a host to get through from network B to network C.

I can get to hosts on RouterA from either network B or C or from from Network A to either B or C.

How do I set this up so that I can get a host on network B to get to a host on network C

Thanks again for any help