Nat works only as below, but the issue the LAN ports is assigned to vlan 2 and i have multiples vlans on the access switch, so traffic will be blocked and only vlan2 traffic will be allowed, i have no idea how to make it works with NAT.
i can only configure the NAT under the VLAN and i should assign the VLAN to the LAN and WAN interfaces to get internet access only for VLAN 2 users.
interface FastEthernet0
switchport access vlan 3
no ip address
!
interface FastEthernet1
switchport access vlan 2
no ip address
interface Vlan2
ip address 10.10.10.1 255.255.255.0
ip nat inside
ip virtual-reassembly in
!
interface Vlan3
ip address 192.168.100.13 255.255.255.0
ip nat outside
ip virtual-reassembly in
!
ip forward-protocol nd
no ip http server
no ip http secure-server
!
ip nat inside source list 1 interface Vlan3 overload
ip route 0.0.0.0 0.0.0.0 192.168.100.1
!
logging esm config
access-list 1 permit 10.10.10.0 0.0.0.255
end
Router#
Router#
Router#
Router#ping 8.8.8.8
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 8.8.8.8, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 1/5/12 ms
