Hi!
nearly everything in the subject..
s:any d:172.16.57.0/24
->
s:136.156.12.1(overload) d:172.16.17.0/24(match-host)
Is it possible to do ?
(IOS (tm) C2600 Software (C2600-IS-M), Version 12.2(13)T8)
The configuration lines about nat, and wich does not seem to work :(
interface Loopback0
ip address 192.168.251.1 255.255.255.252
ip nat inside
!
interface FastEthernet0/0
ip address 136.156.12.1 255.255.0.0
ip nat outside
ip policy route-map Nat
!
ip nat pool castellano 172.16.17.1 172.16.17.254 netmask 255.255.255.0
type match-host
ip nat inside source list 101 interface FastEthernet0/0 overload
ip nat inside destination list 100 pool castellano
!
access-list 100 permit ip any 172.16.57.0 0.0.0.255
access-list 101 permit ip 172.16.104.0 0.0.0.255 172.16.0.0 0.0.63.255
!
route-map Nat permit 10
match ip address 100 101
set ip next-hop 192.168.251.2
thank you :)
|
|
0
|
|
|
|
Reply
|
lpopoz (4)
|
3/28/2011 1:37:16 PM |
|
Some call this "NAT on a stick." See:
http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094430.shtml
Hth,
Aaron
----
>Hi!
>nearly everything in the subject..
>
>s:any d:172.16.57.0/24
>->
>s:136.156.12.1(overload) d:172.16.17.0/24(match-host)
>
>Is it possible to do ?
>
>(IOS (tm) C2600 Software (C2600-IS-M), Version 12.2(13)T8)
>
>The configuration lines about nat, and wich does not seem to work :(
>
>interface Loopback0
> ip address 192.168.251.1 255.255.255.252
> ip nat inside
>!
>interface FastEthernet0/0
> ip address 136.156.12.1 255.255.0.0
> ip nat outside
> ip policy route-map Nat
>!
>ip nat pool castellano 172.16.17.1 172.16.17.254 netmask 255.255.255.0
>type match-host
>ip nat inside source list 101 interface FastEthernet0/0 overload
>ip nat inside destination list 100 pool castellano
>!
>access-list 100 permit ip any 172.16.57.0 0.0.0.255
>access-list 101 permit ip 172.16.104.0 0.0.0.255 172.16.0.0 0.0.63.255
>!
>route-map Nat permit 10
> match ip address 100 101
> set ip next-hop 192.168.251.2
>
>thank you :)
|
|
0
|
|
|
|
Reply
|
Aaron
|
3/28/2011 4:36:51 PM
|
|
Le 28/03/2011 18:36, Aaron Leonard a �crit :
> Some call this "NAT on a stick." See:
>
> http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094430.shtml
Thank you for your answer, i already saw this page.. my configuration is
based on it.
My problem come from the nat source *and* destination "on a stick" ..
with my conf, only source nat works..
|
|
0
|
|
|
|
Reply
|
lpopoz (4)
|
3/29/2011 8:30:05 AM
|
|