RE: NAT on outside interface

From: Gary Braver (gbraver@fastlanenetworks.com)
Date: Tue Aug 02 2005 - 00:56:03 GMT-3


Confused but curious.

int VLAN1
 ip address 192.186.1.2 255.255.255.0
 ip nat outside
!
int VLAN2
 ip address 192.186.2.2 255.255.255.0
 ip nat inside

ip route 0.0.0.0 0.0.0.0 192.168.1.1

ip nat inside source list 12 interface VLAN1 overload
....

Does this mean that any system on the VLAN1 interface will be routed without
NAT!

-----Original Message-----
From: gladston@br.ibm.com [mailto:gladston@br.ibm.com]
Sent: Friday, July 29, 2005 10:18 AM
To: ccielab@groupstudy.com
Subject: NAT on outside interface

R1
s0/0 = nat inside
e0/0.100 = nat outside

If traffic is originated with source IP of s0/0, NAT does not occur.
If traffic is originated with source IP of any other interface, including
interfaces that does not have 'nat inside', nat occurs.

Weird question: Is there a way to have the source IP of e0/0.100 converted?

Check:

Rack2R1#teln 150.100.1.254 /source-interface Ethernet0/0.60

.Jul 29 07:03:57: NAT: s=148.5.15.1->80.80.80.10, d=150.100.1.254 [0]
.Jul 29 07:03:57: NAT: s=150.100.1.254, d=80.80.80.10->148.5.15.1 [0]
.Jul 29 07:03:57: NAT: s=148.5.15.1->80.80.80.10, d=150.100.1.254 [1]
.Jul 29 07:03:57: NAT: s=148.5.15.1->80.80.80.10, d=150.100.1.254 [2]

teln 150.100.1.254 /source-interface Ethernet0/0.100

User Access Verification

Password:
bb1>sh tcp bri
TCB Local Address Foreign Address (state)
61B92F98 150.100.1.254.23 150.100.1.1.11025 ESTAB



This archive was generated by hypermail 2.1.4 : Sun Sep 04 2005 - 17:01:18 GMT-3