dynamic vs static nat

From: ccie99999 <ccie99999_at_googlemail.com>
Date: Mon, 30 Jul 2012 12:14:36 +0000

Hi guys,

I feel a bit frustrated because of this simple issue:

I've got to do a static nat and a dynamic one with the overload.

the static one is for translating my entire lan to a specific net (because
of overlapping over ipsec).

the dynamic one with overload is for surfing the web.

As soon as I set up the static nat the customer looses the access to
internet (the dynamic one stop to work).

I know that a static route has precedence over a dynamic but I've set up a
specific acl:

this is my conf:

NAT:
ip nat inside source list 100 interface Dialer0 overload
ip nat inside source static network 192.168.1.0 192.168.200.0 /24

ACL:
access-list 100 deny ip 192.168.1.0 0.0.0.255 10.10.0.0 0.1.255.255
access-list 100 deny ip 192.168.200.0 0.0.0.255 10.10.0.0 0.1.255.255
access-list 100 permit ip 192.168.1.0 0.0.0.255 any

I've even tried to use a route-map within the dynamic nat but still doesn't
work..

where am I wrong?

thanks in advance

-- 
ccie99999
twitter: @ccie99999
Blogs and organic groups at http://www.ccie.net
Received on Mon Jul 30 2012 - 12:14:36 ART

This archive was generated by hypermail 2.2.0 : Wed Aug 01 2012 - 15:55:23 ART