[c-nsp] Weird ACL Translation - show run

noc ops aptgetd at gmail.com
Wed Aug 31 16:06:09 EDT 2005


Hi,

Not sure if I'm missing something or what. But when I configured my 3640
which is running c3640-jk9s-mz.122-4.T1.bin (not under warranty), I see
below ACL output when I show run.

Routing/NAT is taking place fine w/o any problems but the below ACL
output is bothering me.


Any insight will be appreciated.


regards,
/virendra


config output:
-------------------------------
interface Ethernet0/1
 description Uplink to RFC1918 network, facing towards inside
 ip address 192.168.0.1 255.255.255.248
 ip nat inside
 half-duplex

ip nat inside source list pat-addresses interface Ethernet0/0 overload

ip access-list standard pat-addresses
 permit 192.0.0.0 0.255.255.255 <------ ??

--------------------------------

I even tried doing and undoing the above ACL w/ no avail.

deepspace(config)#ip access-list standard pat-addresses
deepspace(config-std-nacl)#no permit 192.0.0.0 0.255.255.255
deepspace(config-std-nacl)#permit 192.168.0.0 0.255.255.255
deepspace(config-std-nacl)#^Z

I even tried using permit 192.168.0.0 7.255.255.255

I still see the same output, and yes, I'm using ip classless,

ip access-list standard pat-addresses
 permit 192.0.0.0 0.255.255.255


Here's some basic NAT stats:

deepspace#show ip nat statistics
Total active translations: 34 (0 static, 34 dynamic; 34 extended)
Outside interfaces:
  Ethernet0/0
Inside interfaces:
  Ethernet0/1
Hits: 663  Misses: 52
Expired translations: 18
Dynamic mappings:
-- Inside Source
access-list pat-addresses interface Ethernet0/0 refcount 34


deepspace#show ip nat translations
Pro Inside global         Inside local          Outside local
Outside global
tcp Ethernet0/0:44708   192.168.0.2:44708     207.126.111.226:80
207.126.111.226:80
tcp Ethernet0/0:44709   192.168.0.2:44709     207.126.111.226:80
207.126.111.226:80
tcp Ethernet0/0:44710   192.168.0.2:44710     207.126.111.226:80
207.126.111.226:80
tcp Ethernet0/0:44711   192.168.0.2:44711     207.126.111.226:80
207.126.111.226:80
tcp Ethernet0/0:44712   192.168.0.2:44712     207.126.111.226:80
207.126.111.226:80
tcp Ethernet0/0:44713   192.168.0.2:44713     207.126.111.226:80
207.126.111.226:80


More information about the cisco-nsp mailing list