2501 NAT Prob

[csco10941637]

I have Cisco 2501 router with 1 Ethernet and 2 Serial Port.

Have 1 Desktop Window 2003 server available.

Have Private IP from ISP for my Internet Access.

I found NAT solution for connecting my LAN to Internet via 2501.

But only have 1 Ethernet Interface.

What is the solution for the same.

[pkhatri]

Hi,

I'm not sure I get what the issue is. Why do you need more than one Ethernet interface ?

If you have more than one device, get an ethernet hub or switch and connect both your devices and your router interface to that hub/switch.

Hope that helps - pls rate the post if it does.

Paresh

[csco10941637]

Hello, Pkhatri.

I have Dlink Switch connected already.

But My ISP is Authenticating me via my MAC Addrres of one system to whivh i pluged ISP RJ45 Jack.

also ISP wants my request with my private address assigned by ISP (172.16.102.6) for authenticating.

I also wan my LAN to browse internet where i have given 192.168.1.x series of address. so my packets are going with 192.x.x.x as source address whicn has been denied by ISP.

What will b the way.?

[nethelper]

Hello Dhavalkumar,

what exactly is your setup ? Your Windows 2003 server is connected to your Ethernet0 port ? And the ISP connection is through the serial port ? Or are you trying to connect to your ISP through the Ethernet port as well ? And what is the ´private IP´ address assigned to you by your ISP ?

Regards,

Nehelper

[csco10941637]

Hello, Nehelper.

My ISP connection is Ethernet Connection(RJ 45 Jack).

So i wan to connect to ISP through Ethernet port.

My private address is 172.16.102.6. so my isp wants my packets with source address of 172.16.102.6 for authenticating me.

I also wants share my connection in my LAN where i have assigned 192.168.1.X series of address.

what can be the way.

[pkhatri]

Hi,

One solution is to use a hub/switch and connect both your ISP connection and your devices to that hub/switch. Then configure the ethernet interface on the router with a primary address of 172.16.102.6 and a secondary address of 192.168.1.X. Configure your server/PCs with a gateway address of 192.168.1.X (the address used on the router). You will need to use NAT-on-a-stick to get your 192.168.1.X addresses translated to 172.16.102.6.

Here's a link on how to configure NAT-on-a-stick:

http://www.cisco.com/en/US/partner/tech/tk648/tk361/technologies_tech_note09186a0080094430.shtml

If you still have problems, let us know..

Paresh

[pkhatri]

Here's a config to get you started:

interface loopback0

ip address 10.1.1.1 255.255.255.0

ip nat outside

!

interface Ethernet0

ip address 172.16.102.6 255.255.255.252

ip address 192.168.1.1 255.255.255.0 secondary

ip nat inside

ip policy route-map NATMAP

!

ip Nat pool NATPOOL 172.16.102.6 172.16.102.6 prefix-length 29

ip nat inside source list 1 pool NATPOOL overload

!

ip route 0.0.0.0 0.0.0.0 ethernet0 172.16.102.5

!

access-list 1 permit 192.168.1.0 0.0.0.255

access-list 101 permit ip 192.168.1.0 0.0.0.255 any

access-list 101 permit ip any host 182.16.102.6

!

route-map NATMAP permit 10

match ip address 101

set ip next-hop 10.1.1.2

!

Pls do rate posts that help.

Paresh

[csco10941637]

Hello. Pkhatri.

Ok i tried same configures Primary as 172.16.102.6, given secondary as 192.168.1.1.

Also NAT.

Now my E0-Primary IP (172.16.102.6) is able to ping ISP but not my secondary IP(192.168.1.1). but both are able to ping each other.

Even there is entry in NAT Translation table for 192.168.1.1 to 172.16.102.

[pkhatri]

Are you pinging from a PC/Server ? What is the IP address of the box you are pinging from ? Also, could you post the config you have so far ?

Paresh

[spremkumar]

Hi Paresh

I see a small typo error in your previous post ..

I feel it should be access-list 101 permit ip any host 172.16.102.6 instead of access-list 101 permit ip any host 182.16.102.6.

Also dhaval have you configured 182 instead of 172 ? if thats the case can you alter the same and check as mentioned by paresh ?

regds