Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

NAT problem


On my Cisco router running NAT service I have some devices on a couple of vlans which are on the inside network.  They can communicate with each other fine and can access the Internet.

I also have some client devices on a vlan designated as the outside network because this vlan has the gateway router to the Internet on it.

The devices on this vlan include a wireless AP, the clients that connect to this AP, and a couple of wired games consoles.

They get their IP address from the Cisco router and also their gateway configuration points to the Cisco.

The Cisco has an ip route that points to the Internet router on the outside NAT vlan.

So all devices on the outside network can access the Internet, but they can not reach the devices on the inside network.

When I issue a ping on any of them, the reply comes back from the Cisco, and not the pinged device on the inside network.

What am I doing wrong?

Here is some of the relevant config.


interface Vlan10

description VLAN10-WIRELESS

ip address

ip nat outside

ip virtual-reassembly in


ip nat inside source list 10 interface Vlan10 overload

ip nat inside source list 30 interface Vlan10 overload

ip nat inside source list 40 interface Vlan10 overload


! static route out to Internet router

ip route

I read about a solution to this issue, in that I should set this Vlan10 to be an inside network and use a loopback interface as an outside network, then use a static route to forward Internet traffic to the router at

Can someone explain how I can get that to work.

Everyone's tags (2)
New Member

NAT problem


Could you give us all the config of your Cisco router and your AP please ?

If I understand your schema :

INET -------- OUTSIDE VLAN (AP) ------------------- interfaceX (dhcp/nat) CISCO interfaceX (dhcp/nat) -------------- INSIDE VLAN

CreatePlease login to create content