Re: NAT issue

Do you have "ip nat inside" "ip nat outside" on your interfaces? I dont see it there?

On May 21, 2010, at 8:53 AM, Maarten Vervoorn wrote:

> During a lab setup I encounterd on a strange behaviour.
>
> Lab setup
> S0/1 Fa0/0
> R1--------------R3---------------R5----------R1
>
> R3 is a nat router which nat 10.130.208.211 to 105.12
> I want both addresses to be reachable and synchronous (ping 105.12 and
> receive a reply from 105.12, ping 208.211 and a receive a reply form
> 208.211)
> After some configurations I configurated a route-map with a deny any
> statement. Both 105.12 and 208.211 are reachable and reply synchronous. But
> I do not know why if I ping 105.12 from R5 or R1 i receive a reply form
> 105.12 because the route-map has a deny any.
>
> Can anyone clarify this?
>
> Config R3
> interface Loopback1
> ip address 10.15.105.1 255.255.255.0
> !
> interface FastEthernet0/0
> ip address 10.15.98.1 255.255.255.0
> !
> interface Serial1/0
> ip address 10.130.208.254 255.255.255.128
> !
> ip nat inside source static 10.130.208.211 10.15.105.12 route-map test
> !
> ip access-list standard NAT
> deny any
> !
> logging alarm informational
> access-list 100 permit icmp any any
> !
> route-map test permit 10
> match ip address NAT
> !
> !
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri May 21 2010 - 09:03:05 ART