[c-nsp] NAT question.

Troy Beisigl troy at i2bnetworks.com
Mon Sep 17 13:32:35 EDT 2007


sh ip nat translations
Pro Inside global         Inside local          Outside local
Outside global
icmp 66.X.A.99:9893    10.2.0.1:9893         66.X.Y.129:9893
66.X.Y.129:9893


I know that it the router is not doing NAT correctly because even though is
shows up in the tables, our core routers are seeing the 10. address and not
the public address. Below is from the console of one of our core routers
that router C hands off traffic to for the outside world. 

Sep 17 17:17:20: ICMP: dst (10.2.0.1) host unreachable sent to 66.X.Y.129



Troy Beisigl

-----Original Message-----
From: Vincent De Keyzer [mailto:vincent at autempspourmoi.be] 
Sent: Monday, September 17, 2007 6:04 AM
To: 'Troy Beisigl'
Cc: cisco-nsp at puck.nether.net
Subject: RE: [c-nsp] NAT question.

> packets from the Ethernet of Router A do not seem to get nat'd, however to
> show up in the nat translations table. 

What do you mean by that? Please post outputs of "sh ip nat tran" for both
192.168 and 10. What makes you think that don't "get nat'd" ?

Vincent




More information about the cisco-nsp mailing list