nat problems

[nyingmeh]

Hi,

I have a problem with a new Cisco 3640 Router.
I have installed two fastethernet modules on it and receive the following public IP from my provider :

IP address: 64.110.0.130
subnet: 255.255.255.224
Gateway IP : 64.110.0.129

now, I have a large network and would like to do nat on this router. so after setting up the router, I ran the folowing commands.


1. IP routing
2. Int f0/0 ---> ip address 64.110.0.130 255.255.255.224
no shutdown
ip nat outside

3. Int f0/1 ---> ip address 172.16.0.0 255.255.0.0
no shutdown
ip nat inside


4. access-list 1 permit 172.16.0.0 0.0.255.255

5. ip nat pool NETNAT 64.110.0.133 64.110.0.133 netmask 255.255.255.224

6. ip nat inside source list 1 pool NETNAT overload.

then I did a copy run start and then reloaded.

from a lan IP,
172.16.10.5 with gateway IP 172.16.10.1 I am not able to browse, though I can ping the f0/0 and even the gateway 64.110.0.129

I was advised to change the command

5. ip nat pool NETNAT 64.110.0.133 64.110.0.133 netmask 255.255.255.224

to

5. ip nat pool NETNAT 64.110.0.129 64.110.0.129 netmask 255.255.255.224

when I reloaded, the cisco box compained of network address conflit.

I even added.

7. ip route 0.0.0.0 0.0.0.0 f0/0

and yet it just does not work.

can anyone please help with with where I went wrong, or just provide a list of step by step commands to run ?


PS : Later I avoided overloading;


-------------
5. ip nat pool NETNAT 64.110.0.129 64.110.0.133 netmask 255.255.255.224

6. ip nat inside source list 1 pool NETNAT \

---------- STILL NOTHING

when I ran :

sh ip nat translations

I saw a bunch of results in each case, with a whole lot of public IP addresses, probably being tried to be reached from my LAN PC. dunno.

Lastly I cannot ping the outside world from within the router though I put the DNS address

Please help .

 

[itd17]

You can try doing this two different ways.

1) Since .129 and .130 are already in use, your nat pool should include .131-.133

2) You can try overloading with either from the .133 interface. However, you must specify the interface from which you will be translating.
In your case, this will read:

access-list 1 permit 172.16.0.0 0.0.255.255
ip nat inside source list 1 int fa0/0 overload