07-21-2011 04:21 AM - edited 03-07-2019 01:19 AM
Hi
I am trying to configure NAT on a 3900 router but I am getting errors.
config & the errors are listed below
Could anyone please help me identify the problem ?
kind regards
Message was edited by: Keith Newbould
Int Gi0/0
Ip address 10.245.10.186 255.255.255.252
Ip nat outside
!
Int Gi0/2
Ip address 192.168.1.1 255.255.255.0
Ip nat inside
!
Access-list 151 permit tcp host 192.168.181.41 host 10.49.1.51 eq 25
Access-list 151 permit tcp host 192.168.182.41 host 10.49.1.51 eq 25
!
Ip nat pool 151 10.49.5.51 10.49.5.51 netmask 255.255.255.252 overload
!
Ip nat inside source list 151 pool 151
!
Ip route 192.168.181.0 255.255.255.0 192.168.1.254
!
Router#
The error I get is as follows:
*Jul 21 10:50:43.964: NAT: failed to allocate address for 192.168.181.41, list/map 151
*Jul 21 10:50:43.964: mapping pointer available mapping:0
*Jul 21 10:50:43.964: NAT*: Can't create new inside entry - forced_punt_flags: 0
*Jul 21 10:50:43.964: NAT: failed to allocate address for 192.168.181.41, list/map 151
*Jul 21 10:50:43.964: mapping pointer available mapping:0
*Jul 21 10:50:43.964: NAT: translation failed (A), dropping packet s=192.168.181.41 d=10.49.1.51
Solved! Go to Solution.
07-21-2011 06:16 AM
07-21-2011 04:33 AM
Hi,
Clear the nat translations and stats, it should fix after you did.
clear ip nat translation
clear ip nat statistics
Please rate the helpfull posts.
Regards,
Naidu.
07-21-2011 04:38 AM
Hi,
If the above not solved your problem you could change your config as like below...
Router(config) ip access-list extended NAT
10 permit tcp host 192.168.181.41 host 10.49.1.51 eq smtp
route-map NAT permit 10
match ip address NAT
ip nat pool NAT 10.49.5.51 10.49.5.51 netmask 255.255.255.252
ip nat inside source route-map NAT pool NAT
Please rate the helpfull posts.
Regards,
Naidu.
07-21-2011 05:00 AM
Hi Naidu
tried route-map butstill getting the same error
regards
Keith
07-21-2011 04:47 AM
thanks for the assistance Naidu but it did not fix the problem - I couldn't see anything already mapped either
regards
Keith
07-21-2011 04:38 AM
Keith
Just be aware if you do clear the nat translations as Naidu suggests this will break all existing connections that are using NAT on the router so if there are a lot best to do it out of hours.
Jon
07-21-2011 04:48 AM
cheers Jon - only one translation at the moment so it's fine -
regards
Keith
07-21-2011 05:09 AM
Hi Keith,
OK, do like below...hope this will deffinetely helps you.
ip nat pool NAT 10.49.5.51 10.49.5.51 netmask 255.255.255.252
ip nat inside source route-map NAT pool NAT overload
ip nat inside source static tcp 192.168.181.41 25 public_ip 25 extendable
Please rate the helpfull posts.
Regards,
Naidu.
07-21-2011 06:16 AM
YES....
Please rate the helpfull posts.
Regards,
Naidu.
07-22-2011 04:28 PM
Hi Naidu
tried this option but it failed also. I have posted a more detailed peace of the NAT configuration - hopefully that explains it better
regards
Keith
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide