Nat Translation

[Faizan Khursheed]

Sir

Simple setup 192.168.10.x lan subnet through PAT all subnet able access internet .now i need help

i have lan ip  192.168.10.30 its kind a streaming device   this device must go to internet and  also through

one  dedicated WAN(internet) ip  people sitting on  internet can access this 192.168.10.30 from port

18 to 19000 via ip 210.2.X.X

For internet

i did following configuration

access-list 101 permit 192.168.10.0  0.0.0.255 any

ip nat inside source list 101 fa0/1 overload

ip route  0.0.0.0 0.0.0.0 OUTSIDEGATEWAY

For device

ip nat pool 192.168.10.30 192.168.10.30 netmask 255.255.255.0 rotary

ip access-list extended PortForwarding

permit tcp any  host 210.2.x.X  range 19  19000

kindly help   me  from above configuration   i can see translation on my router when i able to access this device (192.168.10.30) via 210..2.x.x

& access-list hit counts but device not able go to internet i  knwo this reason why this happening

But i need solution  device on 192.168.10.30 must go to internet as well users   on internet can access it on WAN ip from port 18 to 19000

Thanks/Regards

[Federico Coto Fajardo]

Hi,

You have a single public IP for NAT use?

Because if you have another, it will be easier to do static PAT to access the 192.168.10.30 device.

Why is the 192.168.10.30 not getting to the Internet?

Is it not getting PATed ''sh ip nat trans | i 192.168.10.30''?

Could you post:

sh run | i ip nat

Federico.

[Faizan Khursheed]

the reason  192.168.10.30 not getting to internet becuase the traffic come from outside to inside

not going  inside to outside

as you can se ip nat destination command  ?

initially i did ip nat inside soucre static  192.168.10.30 210.2.x.x  

i think this will resolve the issue but my client  getting me confuse

above static command will resolve issue for internet and from internet users can connect it  on any port

Thanks for your reply

[Federico Coto Fajardo]

The static NAT command is what you need, just make sure the public IP used for the static NAT is not the public IP used on the Fa0/1 of the router.

Federico.