I need some help sorting out a NAT issue. I am newbie on NAT and I think I am confused on the wildcard to nat all my vlans. I am setting up a home lab for various porpuses vm and home network NAT is only working for 1 Vlan 224= 10.23.224.0\24. The rest wont get to the internet 225-229 10.23.225-229\24
Scenario: Cisco 3745 config below providing NAT and interconnected to a Cisco 3560 L3 with Vlan range 224-229. All vlan interfaces end with .254 for L3 gateways.
I believe my issue is on the NAT_ADDRESSES ACL below and the wilcard got me all confused. I thought this wild card
10.23.0.0 0.0.0.255 would take care of anything on the 10.23.0.0 range, however only vlan 224 works the rest wont get to the internet. I am able to ping 4.2.2.2 from the router and the L3 switch.
help will be apreciated.
Building configuration...
Current configuration : 1179 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname seuz-rt1
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$6m/i$kUvyAZxg9rOOgK0Zqcv8a.
!
no aaa new-model
ip cef
!
!
!
!
ip name-server 4.2.2.2
ip name-server 4.2.2.3
!
username admin secret 5 $1$vCCq$C9eAcSNHojSHFLuRFPVRq0
!
!
!
!
interface FastEthernet0/0
ip address 192.168.10.252 255.255.255.0
ip nat outside
speed 100
full-duplex
!
interface FastEthernet0/1
ip address 10.23.224.1 255.255.255.0
ip nat inside
duplex auto
speed auto
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 192.168.10.1
!
no ip http server
ip nat pool PUBLIC_NAT_IPS 192.168.10.249 192.168.10.250 netmask 255.255.255.0
ip nat inside source list NAT_ADDRESSES pool PUBLIC_NAT_IPS overload
!
ip access-list extended NAT_ADDRESSES
permit ip 10.23.0.0 0.0.0.255 any
permit ip 10.23.0.0 0.0.255.255 any
!
!
control-plane
!
banner motd ^C
DO NOT LOGIN ^C
!
line con 0
exec-timeout 180 0
password cisco
logging synchronous
line aux 0
password password
line vty 0 4
password password
login local
transport input telnet
!
ntp server 64.73.32.135
!
end
