Nat translation from LAN

[Apeiron]

Hello, I'm a student working on a final year project and I would appreciate any help !

I want to Ping a server on the outside, it has the ip of 10.0.0.10 /24 

I'm using a PC in VLAN 50 with the address of 192.168.50.11 /24

Using the simulation mode in packet tracer i see the ping is getting to the server translations are happening okay. But it fails at the CE 2811 router 

Here is the configuration 

Thanks in advance!

[Kasun Bandara]

can you share the PKT file (zip it before upload) because i cant see where is your PC located

[Apeiron]

thanks for the response! 

[Apeiron]

thanks all!

[Flavio Miranda]

Hi

 You need a route on the CE route like this:

 ip route 192.168.50.0 0.0.0.255  <router 2811 Interface>

On the router 2811 you need to have route pointing the Server network.

Where did you apply the NAT ? 

[Apeiron]

Thanks i will try this now and 

I've applied the NAT overload on the CE router and a static NAT on SE router 

[Flavio Miranda]

 Double NAT is complicate. You need to mind the routing very carfully. Keep in mind the the route must be placed basec on the Natted IP address and not on the original IP address.

   You can share the PKT file here and it would be easier to help. You just need to zip it first.

[Flavio Miranda · Accepted solution]

Hello,

 Take a look on this file. It is working.

 What I changed.

On router SE, you put a default route down to CE. This is necessary. the traffic coming from CE will be Natted to  220.110.0.2:

 "ip nat inside source list NAT interface Serial0/3/0 overload"

As the packet reaches SE with IP address of 220.110.0.2, it know how to reply.

On the Core, you need to have default route to CE.

S* 0.0.0.0/0 [1/0] via 192.168.1.1

And then, you need to add two more commands on the OSPF:

router ospf 1

log-adjacency-changes

redistribute static

network 0.0.0.0 255.255.255.255 area 0

default-information originate

With this two command you are going to send all the distribuition a default route so that any route they dont know they send to the Core.

Last but not least, you need to remove this config on the SE router:

!

interface FastEthernet0/0

ip address 10.0.0.1 255.0.0.0

ip nat inside

duplex auto

speed auto

!

You dont need to do NAT on the LAN interface on this case.

[Apeiron]

Thanks for the help!!