[c-nsp] basic nat question

Church, Charles cchurc05 at harris.com
Thu Jun 4 09:00:41 EDT 2009


What's the purpose of having those additional addresses bound as
secondaries?  It's not needed for NAT.

Chuck

-----Original Message-----
From: cisco-nsp-bounces at puck.nether.net
[mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Ryan Goldberg
Sent: Thursday, June 04, 2009 8:17 AM
To: 'cisco-nsp at puck.nether.net'
Subject: [c-nsp] basic nat question


I really did *not* want my first post to cisco-nsp to be this lame,
but...

if you have second-

got an 1841 out there, with x.x.x.161/29 bound on the internet facing
port, and .163, .164, .165 also bound as secondaries.  

need to do some static nat, but only the entries for the primary IP work

eg

ip nat inside source static tcp 192.168.1.103 110 x.x.x.161 110 vrf ISP2
extendable

works just fine

ip nat inside source static tcp 192.168.1.156 443 x.x.x.163 110 vrf ISP2
extendable

does not work

a clue that I'm unable to make use of is the traffic that I send to the
secondary, comes back from the primary according to the nat trans table,
and as verified by packet capture

any help you could provide would be hugely appreciated

running 12.4.24T..

Thanks-
Ryan	

_______________________________________________
cisco-nsp mailing list  cisco-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/


More information about the cisco-nsp mailing list