[c-nsp] Cannot get little soho91 to NAT
RawCode
gonnason at gmail.com
Wed Oct 27 15:41:15 EDT 2004
It has quite a few other people at my work confused, and people on
another cisco forum.
(192.168.0.128)Host----Soho91-----Gateway (to internet) 10.0.105.254
Inital info: The soho can traceroute to any host on the net, can
resolve dns, so it has full connectivity. Almost this exact config
works when I am using pppoe on Eth1 for the ip assignment instead of
this static setup.
The host cannot get past the soho at all. When I do a "debug ip nat
detailed" I get a lot of these:
*Mar 1 00:25:25.235: NAT*: Can't create new inside entry - forced_punt_flags: 0
*Mar 1 00:25:26.243: NAT*: Can't create new inside entry - forced_punt_flags: 0
*Mar 1 00:25:28.263: NAT*: Can't create new inside entry - forced_punt_flags: 0
*Mar 1 00:25:30.271: NAT*: Can't create new inside entry - forced_punt_flags: 0
Any idea what is going on? Here is the config:
Current configuration : 1280 bytes
!
version 12.3
no service pad
service timestamps debug datetime msec
service timestamps log datetime msec
service password-encryption
!
hostname testrouter
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
ip subnet-zero
ip dhcp excluded-address 192.168.0.1 192.168.0.127
!
ip dhcp pool LAN
network 192.168.0.0 255.255.255.0
dns-server 10.0.0.3
default-router 192.168.0.1
!
!
ip name-server 10.0.0.3
!
!
!
!
no crypto isakmp enable
!
!
!
interface Ethernet0
ip address 192.168.0.1 255.255.255.0
ip nat inside
!
interface Ethernet1
ip address 10.0.105.200 255.255.255.0
ip nat outside
duplex auto
no cdp enable
!
ip classless
ip route 0.0.0.0 0.0.0.0 10.0.105.254
no ip http server
no ip http secure-server
ip nat log translations syslog
ip nat inside source list 2 interface Ethernet1 overload
!
!
no logging trap
access-list 2 permit 192.168.0.0 0.0.0.128 log
!
control-plane
!
!
line con 0
password 7
login
no modem enable
transport preferred all
transport output all
line aux 0
transport preferred all
transport output all
line vty 0 4
password 7
login
transport preferred none
transport input telnet
transport output all
!
scheduler max-task-time 5000
end
testrouter#
Thanks,
Mike Gonnason
More information about the cisco-nsp
mailing list