Re: NAT not using all IP NAT

From: Luan M Nguyen (lmnguyen@UU.NET)
Date: Wed Feb 21 2001 - 15:08:23 EST


When you use the overload statement, it's PAT [ port address
translation] I nver seen people use pool more than one ip for pat before.
the point is to conserve ip addresses i guess....my suggestion is to tone
down on the pool to use only one ip address and use the other 3 for static
natting for your servers...etc or you could create 4 pool fuera1,2,3, and 4
each with one ip and create 4 access-lists to segment you inside network
down to 4 blocks each use a pool of its own :)))
hey, while you are at it, can you try to see if your pool start at 137, and
end at 139, will nat use 138?

At 10:15 AM 2/21/2001 -0500, Rafael A. Reta Rodriguez wrote:
>I want to make NAT with 168.233.15.136 to 139 global inside address but
>NAT only use the 168.233.15.137, this is part of the configuration:
>
>BTW I use a Cisco 3640
>
>version 12.0
>interface Ethernet0/0
> ip nat inside
>interface Serial1/0:7
> ip nat outside
>ip nat pool fuera 168.233.15.136 168.233.15.139 netmask 255.255.255.252
>ip nat inside source list 1 pool fuera overload
>access-list 1 permit 10.12.1.229
>access-list 1 permit 10.12.0.0 0.0.255.255
>
>This a chomp of the show ip nat translation:
>Pro Inside global Inside local Outside local Outside global
>tcp 168.233.15.137:1035 10.12.1.229:2183 207.248.1.61:80 207.248.1.61:80
>tcp 168.233.15.137:1257
>10.12.8.144:1224 200.52.208.19:110 200.52.208.19:110
>tcp 168.233.15.137:1228 10.12.1.12:1518 216.140.160.8:80 216.140.160.8:80
>tcp 168.233.15.137:1073 10.12.5.223:1849 207.46.216.74:6667
>207.46.216.74:6667
>tcp 168.233.15.137:2476 10.12.1.43:2476 64.225.34.216:80 64.225.34.216:80
>tcp 168.233.15.137:3041
>10.12.1.43:3041 207.200.89.193:80 207.200.89.193:80
>tcp 168.233.15.137:2082 10.12.8.134:1348 204.178.112.170:80
>204.178.112.170:80
>tcp 168.233.15.137:1260 10.12.1.12:1513 216.140.160.8:80 216.140.160.8:80
>tcp 168.233.15.137:1417
>10.12.5.195:1078 208.239.159.17:80 208.239.159.17:80
>
>And never uses 168.233.15.136 -138 - 139
>What is wrong?
>
>Thanks in advance
>
>RafaReta
>
>
>



This archive was generated by hypermail 2b29 : Sun Aug 04 2002 - 04:12:30 EDT