Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ios bidirectional nat

cannot seem to get bidirectional nat working on a 2801 running 12.4.

ip nat inside source static 10.1.1.1 66.170.199.205

With this static nat entry you can get to the inside host at 66.170.199.205, but 10.1.1.1 send traffic source nat'd to 66.170.199.205.

What am I missing?

6 REPLIES

Re: ios bidirectional nat

It sounds like it' doing what it should - what do you actually need to do?

New Member

Re: ios bidirectional nat

1-1 static nat in both directions. Inbound from the Internet works fine, outbound to the Internet does not.

Re: ios bidirectional nat

Do you also have any dynamic nat configured ?

New Member

Re: ios bidirectional nat

I do, see below. 10.1.2.10 is the culprit, inbound to works fine, outbound from 10.1.2.10 does not.

ip nat inside source list 199 interface

FastEthernet0/0 overload

access-list 199 deny ip host 10.1.2.10 any

access-list 199 permit ip any any

ip nat inside source static 10.1.2.10

Re: ios bidirectional nat

OK - the config looks OK, what is the output of "show ip nat trans" ?

New Member

Re: ios bidirectional nat

Thanks, turned out to be a malformed acl on the router.

773
Views
0
Helpful
6
Replies
CreatePlease login to create content