NAT

[nyingmeh]

i am trying to impliment nat i have 30 public IPs and i cant get to config nat on one interface or one ip this are the commands am using

int fa 0/0
ip add 10.10.10.10 255.255.255.252 for my WAN int
no shut

int fa0/1
ip add 11.11.11.1 255.255.255.0 for my LAN int
no shut

access-list 1 permit 11.11.11.0 255.255.255.0 for my lan add
ip nat inside source list 1 int fa 0/1

pls give the right config

 

[burtsbees]

router>en
router#conf t
router(config)#ip nat inside source list 1 int fa0/1 overload
router(config)#int fa0/0
router(config-if)#ip nat inside
router(config-if)#exit
router(config)#int fa0/1
router(config-if)#ip nat outside
router(config-if)#end
router#copy run start
You need the overload keyword for PAT, but for a simple NAT, you don't. I always recommend PAT.

Burt

 

[nyingmeh]

how do i config a many to many nat

 

[burtsbees]

With a NAT pool, and then the overload command. Do you have a public IP pool? If not, just one public IP, then use PAT, which is one-to-many NAT.

Burt

 

[nyingmeh]

i made all the config right but i acant accces the net
i can ping my next hop tyhat is my isp's router and his DVB modem but i cant get pass that point i guess my config,s are right since i can ping my next hop
pls tell me what to do

 

[nyingmeh]

i foget but i have a total of 64 public ips donno if by using nat on my serial interface i am going to have problems routing my other ips

 

[Minue]

Hello
Please post your present config!To configure NAT.You should first decide how many addresses you want to dedicate to your pool,and how many you want to keep for static Natting (WEB,DNS,FTP servers).Also do you have more than 64 inside clients that needs to go out to the web?If not you can do a NAT only,instead of PAT.Please clarify.
Regards

 

[nyingmeh]

these are my config


interface FastEthernet0/0
ip address 193.222.73.3 255.255.255.248
ip nat outside
duplex auto
speed auto
!
interface Ethernet1/0
bandwidth 2048
ip address 172.30.0.1 255.255.255.252
ip nat inside
full-duplex
!
interface Ethernet1/1
ip address 193.222.73.33 255.255.255.224
half-duplex
!
ip nat pool WAC 193.220.72.4 193.220.72.6 netmask 255.255.255.248
ip nat inside source list 11 pool WAC
ip classless
ip route 193.222.73.0 255.255.255.192 193.222.73.2
no ip http server
!
access-list 11 permit 172.30.0.0 0.0.0.255

!
line con 0
transport input none
line aux 0
line vty 0 4
password xxxx
login
!
end

my pc has 172.30.0.2
172.30.0.1

i can ping
193.222.73.2 next router ISP
193.222.73.1 DVB modem ISP

 

[Minue]

Hello
Try a default route instead of the static,the command,

Ip route 0.0.0.0 0.0.0.0 FastEthernet0/0

or

Ip route 0.0.0.0 0.0.0.0 193.222.73.2

Also note at the moment you are not overloading traffic.

Regards