cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1470
Views
0
Helpful
1
Replies

Need IP NAT solution

Totardo Tobing
Level 3
Level 3

Hello Guys,

We have 1 unit of 2900 series router and 3 FE interfaces. One interfaces is used as sub-interface (We have 2 IP segment that used this router as their gateway) and other 2 ports as internet link connected to router's provider.

ISP give us 1 Public IP and another ISP give us 1 public address two.

The two internet links is used as active-standby link. 

Can you guide how ip nat configuration against this scenario please?

1 Accepted Solution

Accepted Solutions

your dynamic PAT could look like the following. Just replace your interface-IDs and tune the NAT-ACL to you needs.

int gig0/1

  ip nat inside

!

int ser 1/0

  ip nat outside

int ser 1/1

  ip nat outside

!

ip nat inside source route-map NAT-ISP1 interface Serial1/0 overload

ip nat inside source route-map NAT-ISP2 interface Serial1/1 overload

!

ip access-list standard INSIDE

  permit 10.10.12.0 0.0.0.255

!

route-map NAT-ISP1 permit 10

  match ip address INSIDE

  match interface Serial1/0

!

route-map NAT-ISP2 permit 10

  match ip address INSIDE

  match interface Serial1/1

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.

View solution in original post

1 Reply 1

your dynamic PAT could look like the following. Just replace your interface-IDs and tune the NAT-ACL to you needs.

int gig0/1

  ip nat inside

!

int ser 1/0

  ip nat outside

int ser 1/1

  ip nat outside

!

ip nat inside source route-map NAT-ISP1 interface Serial1/0 overload

ip nat inside source route-map NAT-ISP2 interface Serial1/1 overload

!

ip access-list standard INSIDE

  permit 10.10.12.0 0.0.0.255

!

route-map NAT-ISP1 permit 10

  match ip address INSIDE

  match interface Serial1/0

!

route-map NAT-ISP2 permit 10

  match ip address INSIDE

  match interface Serial1/1

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.