RE: GNS Nat Issue

From: Kaiser Anwar <Kaiser_Anwar_at_hotmail.com>
Date: Mon, 17 Dec 2012 10:36:42 -0600

Bingo, was missing the inside keyword from the "ip nat source list 1
interface FastEthernet1/0 overload

Thanks everyone for the help

Type of service [0]:
Set DF bit in IP header? [no]:
Validate reply data? [no]:
Data pattern [0xABCD]:
Loose, Strict, Record, Timestamp, Verbose[none]:
Sweep range of sizes [n]:
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 4.2.2.2, timeout is 2 seconds:
Packet sent with a source address of 165.4.34.11
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 20/42/72 ms
R11#
*Dec 17 10:32:53.643: NAT: s=165.4.34.11->192.168.137.2, d=4.2.2.2 [15]
*Dec 17 10:32:53.707: NAT*: s=4.2.2.2, d=192.168.137.2->165.4.34.11 [28765]
*Dec 17 10:32:53.711: NAT: s=165.4.34.11->192.168.137.2, d=4.2.2.2 [16]
*Dec 17 10:32:53.739: NAT*: s=4.2.2.2, d=192.168.137.2->165.4.34.11 [28766]
*Dec 17 10:32:53.743: NAT: s=165.4.34.11->192.168.137.2, d=4.2.2.2 [17]
*Dec 17 10:32:53.759: NAT*: s=4.2.2.2, d=192.168.137.2->165.4.34.11 [28767]
*Dec 17 10:32:53.767: NAT: s=165.4.34.11->192.168.137.2, d=4.2.2.2 [18]
*Dec 17 10:32:53.783: NAT*: s=4.2.2.2, d=192.168.137.2->165.4.34.11 [28768]
*Dec 17 10:32:53.791: NAT: s=165.4.34.11->192.168.137.2, d=4.2.2.2 [19]
R11#
*Dec 17 10:32:53.863: NAT*: s=4.2.2.2, d=192.168.137.2->165.4.34.11 [28769]
R11#

-----Original Message-----
From: oghenetejiri.groupstudy_at_gmail.com
[mailto:oghenetejiri.groupstudy_at_gmail.com]
Sent: Monday, December 17, 2012 10:09 AM
To: Kaiser Anwar
Subject: Re: GNS Nat Issue

Hi Kaiser,

It shd be

Ip nat inside source list

Not

Ip nat source list

HTH

FORTE
Sent from my BlackBerryR wireless device

-----Original Message-----
From: Kaiser Anwar <Kaiser_Anwar_at_hotmail.com>
Sender: nobody_at_groupstudy.com
Date: Mon, 17 Dec 2012 10:06:12
To: 'Shaughn'<maniac.smg_at_gmail.com>
Reply-To: Kaiser Anwar <Kaiser_Anwar_at_hotmail.com>
Cc: <ccielab_at_groupstudy.com>
Subject: RE: GNS Nat Issue

Here is the relevant config and when I use the debug IP nat command I do not
see anything and I have term on command on.

R11#sh ip nat st
R11#sh ip nat statistics
Total active translations: 0 (0 static, 0 dynamic; 0 extended) Outside
interfaces:
  FastEthernet1/0
Inside interfaces:
  FastEthernet1/1
Hits: 0 Misses: 0
CEF Translated packets: 0, CEF Punted packets: 0 Expired translations: 0
Dynamic mappings:
-- Outside Destination
[Id: 1] access-list 1 interface FastEthernet1/0 refcount 0 Queued Packets: 0
R11#

interface FastEthernet1/0
 ip address 192.168.137.2 255.255.255.0
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface FastEthernet1/1
 ip address 165.4.34.11 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
ip route 0.0.0.0 0.0.0.0 192.168.137.1
!
ip nat source list 1 interface FastEthernet1/0 overload !
access-list 1 permit 165.4.34.0 0.0.0.255

R11#

-----Original Message-----
From: Shaughn [mailto:maniac.smg_at_gmail.com]
Sent: Monday, December 17, 2012 9:30 AM
To: Kaiser Anwar
Cc: <ccielab_at_groupstudy.com>
Subject: Re: GNS Nat Issue

Sorry misread where your IP Nat outside was applied

Have you tried the IP Nat inside source list command

CCIE # 23962

Sent from my iPhone

On 17 Dec 2012, at 3:31 PM, Kaiser Anwar <Kaiser_Anwar_at_hotmail.com> wrote:

> I did and it did not work, FastEthernet1/0 is the outside interface
> which is connecting my router to the loopback interface and
> FastEthernet1/1 is the inside interface
>
> Thanks
>
> -----Original Message-----
> From: Shaughn [mailto:maniac.smg_at_gmail.com]
> Sent: Sunday, December 16, 2012 12:34 PM
> To: Kaiser Anwar
> Cc: <ccielab_at_groupstudy.com>
> Subject: Re: GNS Nat Issue
>
> Change this
>
> ip nat source list 1 interface FastEthernet1/0 overload
>
> To this
>
> ip nat source list 1 interface FastEthernet1/1 overload
>
> CCIE # 23962 (SP)
>
> Sent from my iPhone
>
> On 15 Dec 2012, at 6:43 PM, "Kaiser Anwar" <Kaiser_anwar_at_hotmail.com>
wrote:
>
>> ip nat source list 1 interface FastEthernet1/0 overload

Blogs and organic groups at http://www.ccie.net
Received on Mon Dec 17 2012 - 10:36:42 ART

This archive was generated by hypermail 2.2.0 : Tue Jan 01 2013 - 09:36:53 ART