Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Community will be in read-only mode on 12/14/2017 from 12:00 am pacific to 11:30 am.

During this time you will only be able to see content. Other interactions such as posting, replying to questions, or marking content as helpful will be disabled for few hours.

We apologize for the inconvenience while we perform important updates to the Community.

New Member

Source address NAT ok for some addresses, not others

I have, "ip nat inside source route-map my-map interface s0/0 overload".

The route-map refereces as ACL that permits three hosts, as follows:

route-map may-map

match ip these-hosts

ip access-list extended these-hosts

permit ip host 172.16.1.100 host 10.10.10.100

permit ip host 172.17.1.100 host 10.10.10.100

permit ip host 192.168.1.100 host 10.10.10.100

One observation: the 192.168.1.0 /24 is the network of the nat inside interface (fa0/0) and the address space of the third ACE in the ACL referenced in the route-map. This may or may not be related to the problem (I suspect it is).

Finally, the problem is that the two source addresses in the 172.NumberSpace are correctly nat'ed to the serial0/0 interface address, but the source address 192.168.1.100 (and others tested in that same class C address space) do NOT get NAT'ed.

Anyone have any thoughts as to what's going on?

3 REPLIES

Re: Source address NAT ok for some addresses, not others

NAT config looks good.

The only traffic that would be NATted from the 192.168.1.0/24 subnet is if it comes from 192.168.1.100 destined for host 10.10.10.100. Was the source traffic coming from another host on the 192.168.1.0/24 subnet. In that case, you would have to reconfigure the 3rd ACL statement to permit the whole subnet.

If you still have problems, can you post the router config and show ip nat transalations.

New Member

Re: Source address NAT ok for some addresses, not others

Please pardon the several typo's in the text :\

New Member

Re: Source address NAT ok for some addresses, not others

do you see any counters for 3rd entry in ACl. Plz use

sh access-list these-host

101
Views
0
Helpful
3
Replies
CreatePlease to create content