Re: static NAT problem

From: Gert Doering (gert@greenie.muc.de)
Date: Tue Apr 16 2002 - 04:13:57 EDT


hi,

On Tue, Apr 16, 2002 at 04:15:59PM +0800, Nick wrote:
> ip nat inside source list 10 interface Loopback0 overload
> !
> ! *** static NAT mappings for mail servers ***
> ip nat inside source static 192.168.100.127 200.100.242.168
> ip nat inside source static 192.168.100.128 200.100.242.169

This looks fine. It leaves the question whether the 200.100.242.*
IPs are actually routed to this router - otherwise it can't nat 'em. How
does a traceroute look like?

> !
> ip route 0.0.0.0 0.0.0.0 Ethernet0

Don't do this. It means "send out an ARP for every single destination,
and if some other router happens to do proxy ARP, it will work, but that's
by chance and pretty inefficient".

Do "ip route 0.0.0.0 0.0.0.0 <next-hop-ip>" or (if you want to force it to
use Ethernet0) "ip route 0.0.0.0 0.0.0.0 Ethernet0 <next-hop-ip>".

gert

-- 
USENET is *not* the non-clickable part of WWW!
                                                           //www.muc.de/~gert/
Gert Doering - Munich, Germany                             gert@greenie.muc.de
fax: +49-89-35655025                        gert.doering@physik.tu-muenchen.de



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:13:41 EDT