Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Static NAT doesnt work

Hi all

Trying to simulate the lab on my course but cannot get static nat to work.

Set up is as follows -

access-list INBOUND line 8 extended permit tcp host 10.14.253.2 host 10.0.1.222
access-list SVR-INIT line 8 extended permit tcp host 10.0.3.2 any


class-map match-all LNX-SOURCED
  2 match source-address 10.0.3.2 255.255.255.255
class-map type management match-any REMOTE-ACCESS
  2 match protocol icmp any
  3 match protocol telnet any
  4 match protocol ssh any
  5 match protocol https any
  6 match protocol http any
  7 match protocol xml-https any

policy-map type management first-match MGMT_TEST
  class REMOTE-ACCESS
    permit

policy-map multi-match SVR-NAT
  class LNX-SOURCED
    nat static 10.0.1.222 netmask 255.255.255.255 vlan 100

interface vlan 100
  ip address 10.0.1.1 255.255.255.0
  access-group input INBOUND
  service-policy input MGMT_TEST
  no shutdown
interface vlan 300
  ip address 10.0.3.1 255.255.255.0
  access-group input SVR-INIT
  service-policy input MGMT_TEST
  service-policy input SVR-NAT
  no shutdown

ip route 0.0.0.0 0.0.0.0 10.0.1.2

the vlans are up and up

but no xlate and i cannot ping 10.0.1.222 from anywhere.

i can ping 10.0.1.1 from 10.14.253.2

i have basically copied this from the test plans so any clues as to why its not working would be appreciated

Steve

1 REPLY
New Member

Static NAT doesnt work

Steve

   Can you please explain to us what you are trying to do?   The conguration you have will allow you to create an outbound nat from the server 10.0.3.2.  However, inbound connections will not be Destination natted to that address. 

Thanks

Chris

294
Views
0
Helpful
1
Replies