11-02-2019 03:47 PM
Hi!
I was hoping if I can obtain some assistance with l2nat. I can't seem to get this working. I am trying to implement the network below. The goal is to be able to do L2 NAT Translation from 192.168.1.2 to 10.61.72.5. configurations below:
PC1:
IP: 10.61.72.3
Subnet Mask: 255.255.255.0
Default-Gateway: 10.61.72.1
PC2:
IP: 192.168.1.2
Subnet Mask: 255.255.255.0
Default-Gateway: 192.168.1.1
SW (10.61.72.1)
version 15.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Switch
!
!
!
!
!
!
!
ip cef
no ipv6 cef
!
!
!
ptp mode e2etransparent
license boot level enhancedlanbase
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface FastEthernet1/1
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/2
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/3
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/4
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/5
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/6
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/7
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/8
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface GigabitEthernet1/1
switchport trunk native vlan 721
switchport mode trunk
!
interface GigabitEthernet1/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan721
mac-address 0001.96ca.1a01
ip address 10.61.72.1 255.255.255.0
!
ip classless
!
ip flow-export version 9
!
!
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
!
!
!
end
SW (10.61.72.2)
Current configuration : 1779 bytes
!
version 15.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Switch
!
!
!
!
!
!
!
no ip cef
no ipv6 cef
!
!
!
ptp mode e2etransparent
license boot level enhancedlanbase
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
l2nat instance NAT
instance-id 1
fixup arp
fixup icmp
inside from host 192.168.1.2 to 10.61.72.5
!
!
!
!
!
!
interface FastEthernet1/1
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/2
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/3
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/4
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/5
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/6
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/7
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface FastEthernet1/8
switchport access vlan 721
switchport mode access
switchport nonegotiate
spanning-tree portfast
!
interface GigabitEthernet1/1
switchport trunk native vlan 721
switchport mode trunk
l2nat NAT 721
!
interface GigabitEthernet1/2
!
interface Vlan1
no ip address
shutdown
!
interface Vlan721
ip address 10.61.72.2 255.255.255.0
!
ip classless
!
ip flow-export version 9
!
!
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
!
!
!
end
11-05-2019 03:04 AM
I'm not sure if this is the problem, but the default gateway 192.168.1.1 is not present in your network
even if your goal is to configure L2 config only, as packet tracer is "only" an emulator this may cause the problem
try adding 192.168.1.1 as a secundary address on the switch that is next-hop of the pc
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide