Thanks for the additional explanation. It seems to me that we probably need to consider both the current situation and what the situation may be a little further down the road. In terms of your current situation you have a router with two subnets, you have an outside subnet and an inside subnet. And you have used Public IP addressing on both subnets. In your current situation there is no need to have address translation - and we see that address translation does interfere with getting traffic from outside into your inside network. So for the current situation you should remove address translation.
But what will the situation be a little further down the road? You indicate that this is a new connection to Internet which will replace the current connection. Almost certainly that will change the situation and will probably have several (perhaps many) subnets connected to this router. And it is likely that these subnets will not all be using Public IP addressing. In that situation you will need address translation.
There are several questions that you need to address:
- is the goal of your activities just to configure the router to test the new connection and prove that it does work? Or is the goal to produce a configuration that would provide the starting point for migration from the old connection to the new connection?
- if all you need is a configuration to test the new connection then remove address translation and you should be fine.
- if you need a more comprehensive configuration then you need to consider what you need in terms of address translation. Certainly you will need dynamic address translation similar to what you have and it will allow devices inside the network to initiate traffic to the Internet and to receive responses.
- but do you need for devices in the Internet to initiate traffic to devices in your network? To enable Internet devices to initiate traffic to devices inside your network then you will need static address translation for those devices (in addition to dynamic translation for the rest of the network).
- you can probably look at the existing Internet router and see what kind of address translation it is using and that can guide your decision about what you need on this router.
- another important question is about access lists. I suggested that you remove the access list that you had configured. That was because in the current situation there is no need for it. But as you start to use this new connection for your real network, you will almost certainly need access lists configured. Again looking at the existing Internet connection router should give you guidance about what kind of access lists you need.
HTH
Rick
HTH
Rick
