Ok folks, been beating my head on the wall for a bit on this, I'm referring to brain trust. A bit of a background, I recently graduated from school and I focused on Cisco. After a break to finish the rest of my studies, take a break from studies, and spend time with the fam; I recently fired up the home network to start going back over what I learned and begin prepping for the CCNA. I also work as a tech writer, so anything I can learn to better understand the systems I work with helps as well. My home lab is 3x 3825 Routers, 2x 3750-48TS L3 switches and a 3590 L2 switch. All have the latest IOS.
My goal ultimate goal is to create a fairly complex architecture for testing and observing how changes I make in ACL's, QoS, trunking, and so on affect the network and the hosts. The issue I've run into is getting a simple ROS setup to NAT to my home network (to simulate the ISP and allow hosts access to the Internet). I've been up and down the internet looking for solutions and am at a brick wall. I've attached my current very simple config for a single switch and router, with a single VLAN and trunk.
What I'm seeing is that when I initiate a ping from any interface from the router to the WAN, I get a return like I expect. I've put a deny in my access-list to check that as well. I can also ping to the switch (VLAN 25 192.168.25.101) and the host (192.168.25.10). From the switch, in L2 config, I can ping each router interface. It's when I ping the WAN (I use 8.8.8.8 and my home router 220.100.15.1 - no not my public address) I get nothing.
I set up debug ip icmp on both devices and see the syslog pop when going device to device or router to WAN. I get nothing when going switch to WAN.
- I've tried default-route on the switch to trunk interface, loopback, and to the WAN.
- I've tried static routes. I've tried putting IP NAT INSIDE on the trunk interface.
- I've tried a static IP address on the IP NAT OUTSIDE.
- I've tried using IP NAT ENABLE on both interfaces.
- I've tried a pool of addresses and a single address
- In the IP NAT INSIDE SOURCE, I've used the interface and the port address.
- And a few other things that I've done but am going in circles now...
I also cabled up one of my second routers to act as the WAN and used it to at least to see if I was getting traffic. I set it up using my home network address and set up a loopback with 8.8.8.8 (not connected of course). Like if I was connected, the router interfaces could ping both sides of the NAT and I had syslogs from the debug on both devices. Here's where I get really confused... when I pinged from the switch, I can see the ICMP packets at the second router, but not the return at the switch.
I've copied and pasted the configuration to my other switch and other router and got the same results, just to rule out hardware.
I've also tried, briefly, going L3 on the switch with identical results. (Want to get the L2 down first since I do see this at work.)
Lastly, I decided to put one of the routers in between the switch and the NAT router and BAM... I could ping the WAN from the switch. The IP NAT config is very similar to what I have in the attached files as well.
I know at one point I had ROS working and I have saved configs from school practice that worked. Those are part of what I'm using ATM.
So, any help will be greatly appreciated. I have a good understanding of networks, just not a lot of experience yet... so any gems will also be greatly appreciated. Need any more info, I'll be glad to provide.
Thanks in advance!
