cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
317
Views
0
Helpful
2
Replies

Unable to NAT out

rj45lanman
Level 1
Level 1

Out/In

DSL (DHCP for vlan2) 192.168.1.1

FW ports 0,6,7 are on vlan2

vlan2 is 192.168.1.2

INSIDE: 10.25.0.x (vlan1)

ACL is set to allow all 10.25.0.x traffic out.

NAT is configured to allow all 10.25.0.0 to 192.168.1.1

Inside is only able to ping the 10. traffic, unable to ping out even with icmp active.

2 Replies 2

santukumar
Level 1
Level 1

If u want to access the internet, then u have to do these config to add--

nat (inside) 1 0 0

global (outside) 1 interface

after issuing these commands, u will be able to go to the internet.

The other problem was not being able to ping anything on the inside net. I placed an acl stating: source-192.168.1.0 destination-10.25.0.2 to allow all icmp.