Buy or Renew
Buy or Renew
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
902
Views
0
Helpful
3
Replies

Static NAT problem

askodikara
Level 1
Level 1

‎02-11-2011 09:13 PM - edited ‎03-06-2019 03:30 PM

Hi,

I want to NAT the each Server to a separate public ips as bellow

192.168.96.50 > 119.235.7.170

192.168.96.51 > 119.235.7.172

Pls see the attach network topology for more details

Thanks,

Asanka

Labels:
Preview file
26 KB
0 Helpful
3 Replies 3

dlakkaraju
Level 1
Level 1

‎02-12-2011 05:11 AM

Hi,

Please configure your HeadOffice Router as below.
Router(config)#interface serial0
Router(config-if)#ip nat inside
Router(config-if)#interface serial1 (You didn't name the outside interface, I'm assuming it as Serial1)
Router(config-if)#ip nat outside
Router(config)#ip nat inside source static 192.168.96.50 119.235.7.170
Router(config)#ip nat inside source static 192.168.96.51 119.235.7.172

Thanks

Dinesh

0 Helpful

askodikara
Level 1
Level 1
In response to dlakkaraju

‎02-12-2011 11:32 AM

Hi Dinesh,

Thanks for the update!

I have configured it as follows, I cannot access the servers through internet but I can access it through HO LAN (192.168.95.0)

Head Office router config


interface FastEthernet0/0
description **HeadOffice LAN**
ip address 192.168.95.1 255.255.255.0
duplex auto
speed auto
!
interface FastEthernet0/1
description **Internet**
ip address 119.235.7.170 255.255.255.252
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Serial0/0/0
description **Branch**
ip address 192.168.100.10 255.255.255.252
ip nat inside
ip virtual-reassembly
encapsulation ppp
no fair-queue
invert txclock
!
ip route 0.0.0.0 0.0.0.0 119.235.7.169
ip route 192.168.96.0 255.255.255.0 192.168.100.9
!
!
ip nat pool test 119.235.7.169 119.235.7.174 netmask 255.255.255.248
ip nat inside source static 192.168.96.50 119.235.7.171
ip nat inside source static 192.168.96.51 119.235.7.172
!
access-list 7 permit 192.168.96.0 0.0.0.255

Branch Router config

interface FastEthernet0/0
description **Branch LAN**
ip address 192.168.96.1 255.255.255.0
duplex auto
speed auto
!
interface Serial0/0/0
description **HO**
ip address 192.168.100.9 255.255.255.252
ip nat inside
ip virtual-reassembly
encapsulation ppp
no fair-queue
invert txclock
!
ip route 0.0.0.0 0.0.0.0 192.168.100.10

show and debug Command Output

HO#sh ip nat tra
Pro Inside global         Inside local          Outside local         Outside global
udp 119.235.7.171:4500    192.168.96.50:4500    202.129.232.207:13776 202.129.232.207:13776
udp 119.235.7.171:4500    192.168.96.50:4500    202.129.232.211:55085 202.129.232.211:55085
udp 119.235.7.171:4500    192.168.96.50:4500    202.129.235.16:10918  202.129.235.16:10918
--- 119.235.7.171         192.168.96.50         ---                   ---
tcp 119.235.7.172:445     192.168.96.51:445     119.234.178.62:30558  119.234.178.62:30558
udp 119.235.7.172:4500    192.168.96.51:4500    202.129.235.16:10976  202.129.235.16:10976
--- 119.235.7.172         192.168.96.51         ---                   ---

HO#debug ip nat
IP NAT debugging is on
*Feb 12 11:43:39.299: NAT*: s=192.168.96.50->119.235.7.171, d=202.129.235.16 [11977]it
*Feb 12 11:43:42.267: NAT*: s=192.168.96.50->119.235.7.171, d=202.129.232.211 [11978]
*Feb 12 11:43:44.303: NAT*: s=202.129.232.199, d=119.235.7.171->192.168.96.50 [24084]
*Feb 12 11:43:49.115: NAT*: s=202.129.232.199, d=119.235.7.171->192.168.96.50 [24254]
*Feb 12 11:43:52.159: NAT*: s=192.168.96.50->119.235.7.171, d=202.129.232.207 [11979]
*Feb 12 11:43:54.615: NAT*: s=202.129.232.199, d=119.235.7.171->192.168.96.50 [24329]
*Feb 12 11:43:56.715: NAT*: s=192.168.96.51->119.235.7.172, d=202.129.235.16 [575]
*Feb 12 11:43:59.331: NAT*: s=192.168.96.50->119.235.7.171, d=202.129.235.16 [11980]
*Feb 12 11:44:00.119: NAT*: s=202.129.232.199, d=119.235.7.171->192.168.96.50 [24455]
*Feb 12 11:44:02.299: NAT*: s=192.168.96.50->119.235.7.171, d=202.129.232.211 [11981]
*Feb 12 11:44:12.175: NAT*: s=192.168.96.50->119.235.7.171, d=202.129.232.207 [11982]
*Feb 12 11:44:15.427: NAT*: s=202.129.232.199, d=119.235.7.172->192.168.96.51 [24750]
*Feb 12 11:44:16.731: NAT*: s=192.168.96.51->119.235.7.172, d=202.129.235.16 [576]
*Feb 12 11:44:17.675: NAT: expiring 119.235.7.172 (192.168.96.51) tcp 445 (445)

Kindly advice

Asanka

0 Helpful

dlakkaraju
Level 1
Level 1
In response to askodikara

‎02-12-2011 04:56 PM

Hi,

On your HQ Router please add below configuration.

Router(config)#ip nat inside source list 7 pool test

And can you please remove the "s0" as inside source on your branch office router.

Message was edited by: Dinesh Lakkaraju Spell correction

0 Helpful
Customers Also Viewed These Support Documents