Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

NAT query..

I have router Cisco 1841 on which I have two internet links. I have configured following two commands on it:

ip nat inside source list 101 interface FastEthernet0/0 overload

ip nat inside source static 192.168.172.17 interface FastEthernet0/0

I want to configure the same above commands for one more interface which is fastethernet 0/1. 192.168.172.17 is the ip address of a device which is directly connected to 1841 with vlan1 interface.

Can I do this somehow? I tried but I could not. But I have seen it on 3845 router that it can be configured. IOS version of both routers is 12.4.

I would highly appreciate anyone's prompt help. Thanks.

3 REPLIES
Hall of Fame Super Gold

Re: NAT query..

Hi,

If you configure that for FA0/1 too, that assumes that said interface is outside too.

Is that what you want? Do you want 192.168.172.17 to go out via FA0/1 ? You need PBR for that.

Re: NAT query..

If i understand, you require the source to be natted to 2 different IPs when it leaves the router, i.e nat it to fa 0/0 when the destination is bound that interface and nat to fa0/1 when leaving from that interface

If this is the requirement you would require NAT with route maps.

When you create a NAT entry with an access-list it creates a simple entry

When NAT uses a route map to decide to create a translation entry, it will always create a "fully extended" translation entry. This translation entry will contain both the inside and outside (local and global) address entries and any TCP or UDP port information

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080093fca.shtml

HTH, rate if it does

Narayan

New Member

Re: NAT query..

Thanks Narayan. You understood exactly my problem and what you suggested has solved half of the issue that I am experiencing. Now what about the second NAT command which I mentioned in my orginal query? Is there a way to redirect incoming traffic on both iterfaces (fa0/0 and fa0/1) to firewall also?

Let me expalin it again:

I have following command configured on my router:

ip nat inside source static 192.168.172.17 interface FastEthernet0/0

is there a way that I can configure the same command again on my router but with interface fa0/1 at the end? So there will be ultimately two of these commands configured on my router. Thanks.

101
Views
4
Helpful
3
Replies