cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
410
Views
0
Helpful
1
Replies
Highlighted
Beginner

Need IP NAT solution

Hello Guys,

We have 1 unit of 2900 series router and 3 FE interfaces. One interfaces is used as sub-interface (We have 2 IP segment that used this router as their gateway) and other 2 ports as internet link connected to router's provider.

ISP give us 1 Public IP and another ISP give us 1 public address two.

The two internet links is used as active-standby link. 

Can you guide how ip nat configuration against this scenario please?

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Mentor

your dynamic PAT could look like the following. Just replace your interface-IDs and tune the NAT-ACL to you needs.

int gig0/1

  ip nat inside

!

int ser 1/0

  ip nat outside

int ser 1/1

  ip nat outside

!

ip nat inside source route-map NAT-ISP1 interface Serial1/0 overload

ip nat inside source route-map NAT-ISP2 interface Serial1/1 overload

!

ip access-list standard INSIDE

  permit 10.10.12.0 0.0.0.255

!

route-map NAT-ISP1 permit 10

  match ip address INSIDE

  match interface Serial1/0

!

route-map NAT-ISP2 permit 10

  match ip address INSIDE

  match interface Serial1/1

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

View solution in original post

1 REPLY 1
Highlighted
VIP Mentor

your dynamic PAT could look like the following. Just replace your interface-IDs and tune the NAT-ACL to you needs.

int gig0/1

  ip nat inside

!

int ser 1/0

  ip nat outside

int ser 1/1

  ip nat outside

!

ip nat inside source route-map NAT-ISP1 interface Serial1/0 overload

ip nat inside source route-map NAT-ISP2 interface Serial1/1 overload

!

ip access-list standard INSIDE

  permit 10.10.12.0 0.0.0.255

!

route-map NAT-ISP1 permit 10

  match ip address INSIDE

  match interface Serial1/0

!

route-map NAT-ISP2 permit 10

  match ip address INSIDE

  match interface Serial1/1

-- 
Don't stop after you've improved your network! Improve the world by lending money to the working poor:
http://www.kiva.org/invitedby/karsteni

View solution in original post