RE: NAT inside outside on same interface

From: Rich Sena (ras@poppa.thick.net)
Date: Thu Feb 08 2001 - 19:31:48 EST


You need to do exactly what it says...

encapsulation isl
ip address xxx.xxx.xxx.xxx 255.255.255.xxx

BTW - I do not believe that you can add vLAN info on a Ethernet interface
- only FastEthernet...

On Feb 9, 2001 Dragan Dincic - Dine reported:

> using mentioned method I get :
>
> "Configuring IP routing on a LAN subinterface is only allowed if that
> subinterface is already configured as part of an IEEE 802.10 or ISL vLAN."
>
> this is on: CISCO 4500
> IOS (tm) 4000 Software (XX-D-M), Version 11.1(5), RELEASE SOFTWARE (fc1)
>
> regards,
> Dine
>
> -----Original Message-----
> From: Keith McCallion [mailto:keith@mccallion.com]
> Sent: Friday, February 09, 2001 00:35
> To: Martin Picard
> Cc: cisco-nsp@puck.nether.net
> Subject: Re: NAT inside outside on same interface
>
>
> On Thu, 8 Feb 2001, Martin Picard wrote:
>
> > I can vaguely recall that there was a thread on trying
> > to NAT inside and outside on the same interface...
> > but can't find it back....any pointer ?
>
> Use subinterfaces. ie:
>
> int FastEther1/0/0
> no ip address
> int FastEther1/0/0.1
> ip address 1.1.1.1 255.255.255.0
> ip nat inside
> int FastEther1/0/0.2
> ip address 2.2.2.2 255.255.255.0
> ip nat outside
>
> and that should work for you.
>
> -Keith
>
>

-- 
Rich Sena - ras@thick.net
ThickNET Consulting
"On the way to understanding; you understand, and forget."



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:27 EDT