Access list and ip nat inside

[Tope]

Assuming you are a network consultant hired by a small business to verify why their new office in Allen, TX seems to be having connectivity problems.
According to the site manager, out of 20 employees, only Jack Brickson connects to the internet. You took a look at their router and found this:

R1# show run
!
!
!
access-list 100 permit ip 192.168.200.0 0.0.0.255 any
!
ip nat inside source list 100 interface Gi0/1
!
!

How will you explain the issue to the site manager and what will you do to resolve it

[Meheretab Mengistu]

Hi Tope,

How will you explain the issue to the site manager and what will you do to resolve it?

Assuming everything else is configured correctly, you will resolve the issue by adding "overload" at the end of the "ip nat inside ..." command as follows:
ip nat inside source list 100 interface Gi0/1 overload

The best way to explain to the site manager is to tell the truth; that is, there was a mis-configuration.

HTH,

Meheretab

[Meheretab Mengistu]

How will you explain the issue to the site manager and what will you do to resolve it?

[Georg Pauwen]

Hello,

in addition to Meheretab's post, you also do not need an extended access list, as NAT doesn't care about the destination. So:

access-list 1 permit 192.168.200.0 0.0.0.255 
!
ip nat inside source list 1 interface Gi0/1 overload

is sufficient (and decreases overhead)...

[sajinstha0009936]

overload is missing after interface gig0/1... 

[paul driver]

Hello
Not enough information to establish why you only have one user able to access the internet, Do the other users have the correct addressing?
Can you post the the output of the following into a file and share it.

sh run
sh ip nat translations
sh ip int brief
sh ip route

FYI - the overload keyword  is/should be automatically applied with that nat statement you shouldnt have to apply it manually as its on as default