RE: NAT To Multiple Outside Interfaces

From: Gary Lileikis (glileikis@rogers.com)
Date: Mon Nov 18 2002 - 11:39:12 GMT-3


This should work. You could assign half of the inside addresses to one
pool and the other half to the other pool. Make sure you are not trying
to load balance and there would be no redundancy if present in the
design using the two WAN interfaces.

Cheers...Gary

-----Original Message-----
From: Aamer Kaleem [mailto:kaleemaamer@yahoo.com]
Sent: Monday, November 18, 2002 2:44 AM
To: Gary Lileikis; 'Nate Kleven'
Cc: ccielab@groupstudy.com
Subject: RE: NAT To Multiple Outside Interfaces

how about creating two NAT pools (one each for outside
Serial interfaces) and in each NAT pool use the IP
address of the physical interfaces....

Thank you,

Aamer

--- Gary Lileikis <glileikis@rogers.com> wrote:
> I believe this will work. Make sure the new loopback interface in in
> the routing process and it's network number is know by
> other routers.
>
> Interface Ethernet 0
> ip nat inside
> ip address 10.0.0.1 255.255.255.0
> !
> !
> Int loop 0
> Ip address 192.168.3.1 255.255.255.0
> !
> Interface Serial 0
> ip nat outside
> ip address 192.68.1.1 255.255.255.0
> !
> Interface Serial 1
> ip nat outside
> ip address 192.68.2.1 255.255.255.0
> !
> ip nat inside source list 1 interface loop 0
> overload
> !
> !
> access-list 1 permit 10.0.0.0 0.0.0.255
>
>
> Regards,
> Gary Lileikis
>
>
> -----Original Message-----
> From: Nate Kleven [mailto:cciemail@intellinet.ws]
> Sent: Sunday, November 17, 2002 2:47 AM
> To: ccielab@groupstudy.com
> Subject: NAT To Multiple Outside Interfaces
>
>
> There is probably a very easy solution to this, but
> it escapes me:
> Router
> 1 has three interfaces, 1 ethernet and 2 serials.
> The ethernet is the
> NAT INSIDE interface. Clients on the inside need to
> be NAT'd for
> request going out both of the serial interfaces.
> How do I do this?
> Normally it would look something like this.
>
>
>
> Interface Ethernet 0
> ip nat inside
> ip address 10.0.0.1 255.255.255.0
> !
> !
> !
> Interface Serial 0
> ip nat outside
> ip address 192.68.1.1 255.255.255.0
> !
> Interface Serial 1
> ip nat outside
> ip address 192.68.2.1 255.255.255.0
> !
> ip nat inside source list 1 interface s0 overload
> !
> !
> access-list 1 permit 10.0.0.0 0.0.0.255
>
>
> In a configuration like this, my traffic would all
> go out Serial O
> because it is the one in the overload statement,
> right? What if I want
> to NAT a packet that is only reachable via serial 1?
> I'm sure I'm
> overlooking the obvious.
>
> Thanks in advance.
>
> Nate



This archive was generated by hypermail 2.1.4 : Tue Dec 03 2002 - 07:23:04 GMT-3