Solved: Cisco 836 with ADSL NAT and VPN

Carsten Radke · ‎01-29-2008

Hallo,

I try to configure the 836, to work with the Cico VPN-Client.

The client connects to the router from outside but my problem is that the nat from inside LAN to the internet is not working.

here's a bit of log from nat:

*Mar 6 23:48:02.585: NAT: map match nonat

*Mar 6 23:48:02.585: NAT*: Can't create new inside entry - forced_punt_flags: 0*Mar 6 23:48:02.585: NAT: map match nonat

I don't know what I do wrong, please help.

config in attachment,

Carsten

dongdongliu · ‎01-29-2008

I am really sorry, Nat 0 is about other reply, I posted wrong place. I have modified my reply.

look at your configuration:

ip nat inside source route-map nonat interface Dialer1 overload

Dialer1 ?? I think Dialler 0 is right.

bamboo · ‎01-29-2008

you put

ip nat outside

in Dialer0 interface

but you put Dialer1 in

ip nat inside source route-map nonat interface Dialer1 overload

therefore the NAT does not work

change

ip nat inside source route-map nonat interface Dialer1 overload

to

ip nat inside source route-map nonat interface Dialer0 overload

dongdongliu · ‎01-29-2008

ip nat inside source route-map nonat interface Dialer1 overload

Dialer1 ??

Carsten Radke · ‎01-29-2008

Hi dongdonqliu,

but nat 0 is for traffic that will not be natted.

Any traffic to the internet have to nat.

could you explain me your message, please ?

dongdongliu · ‎01-29-2008

I am really sorry, Nat 0 is about other reply, I posted wrong place. I have modified my reply.

look at your configuration:

ip nat inside source route-map nonat interface Dialer1 overload

Dialer1 ?? I think Dialler 0 is right.

bamboo · ‎01-29-2008

you put

ip nat outside

in Dialer0 interface

but you put Dialer1 in

ip nat inside source route-map nonat interface Dialer1 overload

therefore the NAT does not work

change

ip nat inside source route-map nonat interface Dialer1 overload

to

ip nat inside source route-map nonat interface Dialer0 overload