I have a Cisco 1921 router, in the configuration I have several static addresses in a NAT. Recently, my NAT stopped working. I have everything set up correctly to the best of my knowledge. Thanks in advance!
There is a fiber switch, proved by the ISP, which feeds to my Cisco 1921, and then goes from there to a series of Cisco SG50024 (POE and non POE versions) and a number of SF50024 (some POE and non POE). The path to the devices that need NAT access are as follows
192.168.25.150 (Phone server)
Cisco 1921 > Cisco SG50025 > Server (with x.x.25.150)
192.168.25.152 (Backup of .150 address)
Cisco 1921 > Cisco SG50024 > Server (with x.x.25.152)
192.168.25.200 (Video Server)
Cisco 1921 > Cisco SG50024 > Cisco SF50024 > Video Server (with x.x.25.200)
I am making some notes on your show run. From what I can tell about your network these changes should get your static nat translations up and running. Some of the lines are marked through because they are redundant or not needed based off what I understand your goal to be.
ip nat pool OTUSFWRD 192.168.25.60 192.168.25.60 netmask 255.255.255.0 type rotary <- Not needed
ip nat inside source list 1 interface GigabitEthernet0/0 overload
ip nat inside source list 100 interface GigabitEthernet0/0 overload <- Redundant
ip nat inside source static 192.168.25.200 67.x.x.146
ip nat inside source static 192.168.25.202 67.x.x.147
ip nat inside source static 192.168.25.150 67.x.x.156
ip nat inside source static 192.168.25.152 67.x.x.157 <- This statement was binding .151 instead of .152.
ip nat inside destination list 185 pool OTUSFWRD <- Not needed
ip route 0.0.0.0 0.0.0.0 67.x.x.x
access-list 1 permit 192.168.25.0 0.0.0.255
access-list 100 permit ip 192.168.25.0 0.0.0.255 any <- Redundant
access-list 185 permit tcp any any range 1 65000 <- not needed
access-list 185 permit udp any any range 1 65000 <- not needed
It should be also noted that I have an OpenTable PC for restaurant reservations. The OpenTable pc needs ports opened for remote communication. That is the OTUSFWRD pool. and a static address of 192.168.25.60
This is actually a pretty cool feature, i didn't even know it existed until I was looking for a solution to advertise a subnet (prefix in BGP talk), only if a certain condition existed. This is exactly what conditional advertisements does
j ai une question j ai achete un routeur cisco 887VA-k9 , je le configuré avec la configuration ci- dessous
si je le lier avec mon pc portable sur l un de ses ports directement ça marche toute est bien ( la connexion internet + m...
Attached policy provides CLI access to the Cisco 4G router over text messaging. Two files are in the attached .tar file:
2. PDF with instructions on how to load and use the .tcl file.