Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Community Member

connecting 501E behind 801

i have 801 connected to internet, i want to enable NAT in firewall so that all the users behind the firewall can use the internet.

the 801 config as below:

interface Ethernet0

ip address 192.168.0.240 255.255.255.0

no cdp enable

!

interface BRI0

no ip address

encapsulation ppp

dialer pool-member 1

isdn switch-type basic-net3

no cdp enable

ppp authentication pap callin

!

interface Dialer1

description CONNECTION TO INTERNET

ip unnumbered E0

encapsulation ppp

dialer pool 1

dialer idle-timeout 0

dialer string 222222

dialer persistent

dialer-group 1

no cdp enable

ppp authentication pap callin

ppp pap sent-username xxxxxx password xxxxx

on the Pix i have following config

interface ethernet0 10full

interface ethernet1 10full

ip address outside 192.168.0.239 255.255.255.0

ip address inside 192.168.0.238 255.255.255.0

what will be my global(outside), nat(inside) & route command ?

7 REPLIES
Silver

Re: connecting 501E behind 801

Hi,

If you want to do NAT on the PIX, your ISP must have provided you with some public address, right?

Let say you are given 195.1.1.1/32 address from your isp

your statements will be like this

nat (inside) 1 0 0

global (outside) 1 195.1.1.1

the route on the pix will be

route outside 0.0.0.0 0.0.0.0 192.168.0.240

Similiarly you will have another route on your 801

e.g.

route 195.1.1.1 0.0.0.0 192.168.0.239

In case you are not given an IP address from the ISP, then the only IP you can use is the 801's external IP, hence NAT has to be done there.

Thanks

Nadeem

Community Member

Re: connecting 501E behind 801

ok, so what will be my NAT setting for 801. and what will be my PIX config without NAT

Community Member

Re: connecting 501E behind 801

Why would you do NAT on the 801 if you already have NAT configured on the PIX?

Silver

Re: connecting 501E behind 801

THe reason for doing NAT on the router is because he is only given a single IP address on the router's outside interface. So he has to use NAT over there.

Community Member

Re: connecting 501E behind 801

ok, so what will be my NAT setting for 801. and what will be my PIX config without NAT.... can you provide with any examples

thanks

shoeb

Silver

Re: connecting 501E behind 801

Hi,

Read through this link for configuring NAT on router.

http://www.cisco.com/en/US/partner/tech/tk648/tk361/technologies_tech_note09186a0080094e77.shtml

for your pix, you just need the following

nat (inside) 1 0 0

global (outside) 1 interface

or

nat (inside) 0 0 0

Thanks

Nadeem

Community Member

Re: connecting 501E behind 801

thanks nadeem

will my global(outside) will change to

nat (inside) 1 0 0

global (outside) 1 192.168.1.240 (my 801 dialer IP)

shoeb

94
Views
0
Helpful
7
Replies
CreatePlease to create content