cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
476
Views
0
Helpful
4
Replies

NAT on a stick problem

with_joerg
Level 1
Level 1

Dear all,

I ahve a problem with NAT on stick which I cannot resolve. Basically the internal client(s) 172.31.80.55 (see attached diagram) is accessing the IP address 1.1.1.227. The destination should get translated from 1.1.1.227 into 10.10.118.227 and be forwarded to the gateway/firewall accordingly. It is NOT possible to do this on the gateway/firewall. This why I am looking at NAT on a stick.

I did define an ACL plus a route map matching all traffic from 172.31.80.55 to 1.1.1.227 and forwarding it to the loopback-if 10 as next hop.

Then I have ip nat inside on if lo10 and ip nat outside on if eth0. Further I have the nat statement from the diagram.

What I obesrve is that the ACL is matching and the route map is triggered. However NAT never comes into play. The show ip nat translation verbose always shows a count of zero.

What do I do wrong?

Thanks,

--Joerg

4 Replies 4

John Blakley
VIP Alumni
VIP Alumni

It's hard to say without seeing the router config. I assume that you have an interface that's on the inside that has a 172.31.80.x addressing? Do you have "ip nat inside" on this interface?

HTH,

John

HTH, John *** Please rate all useful posts ***

Thanks, I will get the configs together in the new year. There is an if 172.31.80.X but I said on this if "ip nat outside" whilst I said on the loopback-if "ip nat inside". Could this be wrong?

--Joerg

You would generally place nat on the outside and inside interfaces. Try switching it around, and see if that fixes your problem. Take the nat statement off of the loopback, and place the "ip nat inside" on the 172.31.80.x interface, and "ip nat outside" on your public interface.

HTH,

John

HTH, John *** Please rate all useful posts ***

I agree with Blakley.. Nat statements belong on the inside/outside interfaces, never seen them in the loopback interfaces.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: