dlsw (probably telnet) and nat (other strange behavior ?)

From: alain faure (alainfaure@xxxxxxxx)
Date: Sat Mar 02 2002 - 11:53:48 GMT-3


   
Hi,

well, new day, new pbm.

r1----ripv2----(nat outside) @13.1.13.3 r3(nat inside)-----ospf----r6

I suppose maybye it can be related to the thread about nat strange behavior.
I a not very used to nat.

Ok,

on r6 there is a loopback 116.1.1.1
on r1 there is a loopback 115.1.1.1

on r3 i put :
router rip
 redistribute ospf 1
 network 13.1.0.0
 default-metric 1
 distribute-list nonatnetwork out Serial0/0
!
ip nat inside source static network 116.0.0.0 117.0.0.0 /8
ip nat inside source static network 112.0.0.0 113.0.0.0 /8
ip classless
ip http server
ip pim bidir-enable
!
!
ip access-list standard nonatnetwork
 deny 112.0.0.0 0.255.255.255
 deny 116.0.0.0 0.255.255.255
 permit any
!

So 112.0.0.0 and 116.0.0.0 are nated to respectivly 113.0.0.0 and 117.0.0.0.
112.0.0.0 and 116.0.0.0 routes are not going to r1 on witch i put a policy
routing.

On r1:
router rip
 version 2
 timers basic 30 180 0 240
 network 13.1.0.0
 network 115.0.0.0
 network 150.50.0.0
 no auto-summary
!
ip local policy route-map TONAT
ip kerberos source-interface any
ip classless
ip http server
!
!
ip access-list extended tonat
 permit ip any 113.0.0.0 0.255.255.255
 permit ip any 117.0.0.0 0.255.255.255
 permit ip any 112.0.0.0 0.255.255.255
 permit ip any 116.0.0.0 0.255.255.255

route-map TONAT permit 10
 match ip address tonat
 set ip next-hop 13.1.13.3
---------------------------------------
well, when i ping 116.1.1.1 it ok
R1#ping 116.1.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 116.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/32/32 ms
R1#ping 113.1.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 113.1.1.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 32/32/36 ms
-----------------------------------
but, and that's the point when i made a DSLW peer or telnet 116.1.1.1 that
don't work.

R1#telnet 116.1.1.1
Trying 116.1.1.1 ...
% Destination unreachable; gateway or host down
----------------------------------------------
On r3 :
R3#telnet 116.1.1.1
Trying 116.1.1.1 ... Open

User Access Verification

Password:

----------------------------------------------
Some body have an explanation for that or a clue ?



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:56:51 GMT-3