05-03-2023 10:32 AM
Hy everyone
Please I have problem with cisco router
I configured static nat on router , when I run show ip nat transactions, the internal and external addresses that I configure appear but when capture packets outside the source ip doesn't translated ?
Thank
05-03-2023 10:42 AM
if the NAT transaction show IP not IP + L4 ports then the NAT is not work, what you see is static NAT you config not what router NATing
05-03-2023 12:58 PM
exactly I see just IP without Port ? How can I resolve this problem and enable static nat?
05-03-2023 01:01 PM
TS point to check
1- make sure that you config
ip nat inside
ip nat outside
2- Check if traffic is enter from inside and exit from outside interface.
3- make double check that IP is correct.
05-03-2023 01:16 PM
Because when now I work with dynamic nat , it works but static no ?
05-03-2023 01:18 PM - edited 05-03-2023 01:19 PM
can I see the NAT config
05-03-2023 01:41 PM
The current config (dynamic nat)?
05-03-2023 01:45 PM
I need config for following:-
1- routing config in router
2- interface config
3- dynamic NAT config
4- static NAT config
05-03-2023 02:41 PM
this is static NAT
Router(config)#ip nat inside source static 10.0.0.2 59.40.40.1
Router(config)#interface fa0/0
Router(config-if)#ip nat inside
Router(config)#interface fa0/1
Router(config-if)#ip nat outside
S* 0.0.0.0/0 [1/0] via 192.168.36.1
192.168.36.0/24 is variably subnetted, 4 subnets, 2 masks
C 192.168.36.0/24 is directly connected, Ethernet0/1
L 192.168.36.55/32 is directly connected, Ethernet0/1
L 192.168.36.80/32 is directly connected, Ethernet0/1
L 192.168.36.81/32 is directly connected, Ethernet0/1
S 192.168.42.0/24 [1/0] via 192.168.43.2
192.168.43.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.43.0/24 is directly connected, Ethernet0/0
L 192.168.43.1/32 is directly connected, Ethernet0/0
S 192.168.44.0/24 [1/0] via 192.168.36.66
i remove static NAT and replace it with dynamic configuration :
Router(config)#interface fa0/0
Router(config-if)#ip nat inside
Router(config)#interface eth0/0/0
Router(config-if)#ip nat outside
Router(config)#access-list 1 permit 192.168.0.0 0.0.255.255
Router(config)#ip nat pool MY_POOL 4.4.4.1 4.4.4.5 netmask 255.255.255.0
Router(config)#ip nat inside source list 1 pool MY_POOL
05-03-2023 03:22 PM
Router(config)#ip nat inside source static 10.0.0.2 59.40.40.1
S* 0.0.0.0/0 [1/0] via 192.168.36.1
192.168.36.0/24 is variably subnetted, 4 subnets, 2 masks
C 192.168.36.0/24 is directly connected, Ethernet0/1
L 192.168.36.55/32 is directly connected, Ethernet0/1
L 192.168.36.80/32 is directly connected, Ethernet0/1
L 192.168.36.81/32 is directly connected, Ethernet0/1
S 192.168.42.0/24 [1/0] via 192.168.43.2
192.168.43.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.43.0/24 is directly connected, Ethernet0/0
L 192.168.43.1/32 is directly connected, Ethernet0/0
S 192.168.44.0/24 [1/0] via 192.168.36.66
the routing not show the real IP and mapped IP ??
05-03-2023 03:51 PM
Hello
Usually when you perform static nat and dynamic nat together, you would negate the static nat address from the dynamic nat ACL
Example
access-list 1 deny host 192.168.0.2
access-list 1 192.168.0.0.0.255.255
ip nat pool MY_POOL 4.4.4.1 4.4.4.5 netmask 255.255.255.0
ip nat inside source list 1 pool MY_POOL
ip nat inside source static 192.168.0.2 4.4.4.6
However from your OP the static nat addressing does not reflect either an internal or external host currently active within or towards your network, unless that is you are not showing all the correct information?
ip nat inside source static 10.0.0.2 59.40.40.1
05-03-2023 04:54 PM
Sorry , I have mixed my config and the config that I based on .
this is static NAT
Router(config)#ip nat inside source static 192.168.42.43 192.168.36.80
Router(config)#interface fa0/0
Router(config-if)#ip nat inside
Router(config)#interface fa0/1
Router(config-if)#ip nat outside
S* 0.0.0.0/0 [1/0] via 192.168.36.1
192.168.36.0/24 is variably subnetted, 4 subnets, 2 masks
C 192.168.36.0/24 is directly connected, Ethernet0/1
L 192.168.36.55/32 is directly connected, Ethernet0/1
L 192.168.36.80/32 is directly connected, Ethernet0/1
L 192.168.36.81/32 is directly connected, Ethernet0/1
S 192.168.42.0/24 [1/0] via 192.168.43.2
192.168.43.0/24 is variably subnetted, 2 subnets, 2 masks
C 192.168.43.0/24 is directly connected, Ethernet0/0
L 192.168.43.1/32 is directly connected, Ethernet0/0
S 192.168.44.0/24 [1/0] via 192.168.36.66
i removed static NAT and replaced it with dynamic configuration :
Router(config)#interface fa0/0
Router(config-if)#ip nat inside
Router(config)#interface fa0/1
Router(config-if)#ip nat outside
Router(config)#access-list 1 permit 192.168.0.0 0.0.255.255
Router(config)#ip nat pool MY_POOL 192.168.35.80 192.168.35.100 netmask 255.255.255.0
Router(config)#ip nat inside source list 1 pool MY_POOL
05-03-2023 05:05 PM
how three device connect to same interface ?
L 192.168.36.55/32 is directly connected, Ethernet0/1
L 192.168.36.80/32 is directly connected, Ethernet0/1
L 192.168.36.81/32 is directly connected, Ethernet0/1
05-03-2023 05:09 PM
the ip address of ethernet 0/1 is 192.168.36.55/32 but the others I think that are added due to NAT
05-03-2023 05:21 PM
correct and it answer for why the static is not work
you use NAT 1:1 to IP and dynamic so you must start config the router again in this seq
no ip nat outside
no ip nat inside list
clear ip nat <<- apply this at least three times
ip nat inside static
ip nat outside
then check the
show ip nat translation
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide