Re: Another NAT problem

From: Hunt Lee (ciscoforme3@yahoo.com.au)
Date: Sat Nov 02 2002 - 20:29:16 GMT-3


Hi Nigel,

I'm trying to use the TCP load balancing feature of NAT. So from the outside
there appears to be a single server at the Internal Global address
(100.20.1.1). And in reality, the router (RTA) is configured to perform
round-robin NAT translation to the three Internal Local IPs (192.168.1.2,
192.168.1.3 & 192.168.1.4).

According to CCO http://www.cisco.com/warp/customer/556/5.html , for outside to
inside, NAT should always take place before routing.

However, from my test lab, I couldn't get the RTA to translate the packets when
outside hosts are trying to reach 100.20.1.1... don't know why.

RTB#ping 100.20.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 100.20.1.1, timeout is 2 seconds:
U.U.U
Success rate is 0 percent (0/5)
RTB#

RTA#sh ip nat translations

RTA#

Regards,
H.

 --- Nigel Taylor <nigel_taylor@hotmail.com> wrote: > Hunt,
> I'm a bit lost on what exactly it is you're trying to accomplish?
> I understand that you have 3 servers with mirrored content and I'm guessing
> you would like users to access any of the three devices as requested. I
> don't see how NAT will help you out in this situation. If you use a static
> mapping then you'll have to define a different "virtual IP" for each device.
> However, if you use port mapping then the ports will be unique(unless
> statically defines). Why not simply define the 3 servers in DNS this way
> the hostname(URL) resolves to any of the 3 servers. Additionally, you could
> opt for one of the content switches form Cisco, foundry, etc...
>
> HTH
>
> Nigel
>
> ----- Original Message -----
> From: "Hunt Lee" <ciscoforme3@yahoo.com.au>
> To: <ccielab@groupstudy.com>
> Sent: Saturday, November 02, 2002 6:25 AM
> Subject: Another NAT problem
>
>
> > Group,
> >
> > I have run into another NAT problem. This time, what I'm trying to
> achieve is
> > that I have 3 servers with mirrored content, & I want to create a "virtual
> > server" with an IP of 100.20.1.1
> >
> > ServerA (192.168.1.2/24)
> > \
> > ServerB (192.168.1.3/24)- RTA ---- RTB (207.35.14.81 /30)
> > /
> > ServerC (192.168.1.4/24)
> >
> > But when I tried to ping the Virtual IP from RTB, no NAT translation is
> taking
> > place, and hence the ping is unsucessful.
> >
> >
> > here's RTA config...
> >
> > interface FastEthernet0/0
> > description Inside NAT - to the 3 servers
> > ip address 192.168.1.1 255.255.255.0
> > ip nat inside
> > no ip route-cache
> > no ip mroute-cache
> > duplex auto
> > speed auto
> > !
> > interface Serial0/0
> > description to Outside - to RTB
> > ip address 207.35.14.82 255.255.255.252
> > ip nat outside
> > no ip route-cache
> > no ip mroute-cache
> > clockrate 64000
> >
> >
> > ip nat pool PoolOne 192.168.1.2 192.168.1.4 prefix-length 24 type rotary
> > ip nat inside destination list 5 pool PoolOne
> >
> > access-list 5 permit 100.20.1.1
> >
> >
> > ****** I can ping fine to the Internal local IPs of the 3 servers *****
> >
> > RTB#ping 192.168.1.2
> >
> > Type escape sequence to abort.
> > Sending 5, 100-byte ICMP Echos to 192.168.1.2, timeout is 2 seconds:
> > !!!!!
> > Success rate is 100 percent (5/5), round-trip min/avg/max = 32/33/36 ms
> > RTB#ping 192.168.1.3
> >
> > Type escape sequence to abort.
> > Sending 5, 100-byte ICMP Echos to 192.168.1.3, timeout is 2 seconds:
> > !!!!!
> > Success rate is 100 percent (5/5), round-trip min/avg/max = 32/34/36 ms
> > RTB#
> >
> >
> >
> > **** but when I try to ping the Virtual IP, nothing happens ****
> >
> > RTB#ping 100.20.1.1
> >
> > Type escape sequence to abort.
> > Sending 5, 100-byte ICMP Echos to 100.20.1.1, timeout is 2 seconds:
> > U.U.U
> > Success rate is 0 percent (0/5)
> > RTB#
> >
> >
> > RTA#sh ip nat translations
> >
> > RTA#
> >
> > Any help will be greatly appreciated.
> >
> > Regards,
> > H.
> >
> > http://careers.yahoo.com.au - Yahoo! Careers
> > - 1,000's of jobs waiting online for you!

http://careers.yahoo.com.au - Yahoo! Careers
- 1,000's of jobs waiting online for you!



This archive was generated by hypermail 2.1.4 : Tue Dec 03 2002 - 07:22:51 GMT-3