NAT

Unanswered Question
Sep 28th, 2010
User Badges:

Hello I have a problem with NAT,


the original config works fine (two lines below)


nat (inside) 1 10.149.0.0 255.0.0.0

global (outside) 1 62.206.190.254



Additional I want to NAT the inbound traffic for a customer from outside 172.16.X.X to 10.149.241.20-10.149.241.254 but when I type in the two lines below,

I get an error message like no translations group found.




global (inside) 2 10.149.241.20-10.149.241.254  netmask 255.255.255.0
nat (outside) 2 172.16.0.0 255.255.0.0 outside


I have no idea what went wrong.


Many thanks for your help

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Ashley Georgeson Tue, 09/28/2010 - 01:57
User Badges:

I think for your inbound traffic (outside to inside) you will require a static nat translation.


e.g.


static (outside,inside) 10.149.241.0 172.16.0.0 netmask 255.255.255.0 0 0


I don't think that specific example will work for you due to subnet mask mis-match, but the theory may be  on the right lines.


Alternatively, I found a post discussing the method you were trying, also finding similar issues:



It may be worth a read - especially the conduit permit ip command and debugging they are using to troubleshoot.
Regards, Ash.
oezkanuenlue Tue, 09/28/2010 - 02:14
User Badges:

Thank you for your help ,

but I want to NAT dynamic addresses, without using static.

praprama Tue, 09/28/2010 - 08:54
User Badges:
  • Cisco Employee,

Hi,


Can you past the exact error message you are getting? Also, please try running a packet-tracer from the outside to the inside and send that output as well.


Thanks and Regards,

Prapanch

Actions

This Discussion