[c-nsp] NAT with 2 routers

james edwards lists.james.edwards at gmail.com
Thu Apr 6 23:11:35 EDT 2006


I am working with a client who is trying to NAT with 2 routers where
in nat outside interface is on one router and the inside nat IP's/hosts
are located off the second router. There is a T-1 between the 2 routers.
I think I need to bridge the T-1's, making the 2 routers on the same LAN
(no need for the static routes) but I only have remote access and can't
try any commands that might lock me out. They are needing to one to one
NAT the radmin port, 4899 to host 10.166.65.50. Here is the config they
have so far, could someone give me some hints ? Am I correct in thinking
NAT's public and private interfaces must be on the same router ?

james

RTR 1:

!
interface Loopback1
 ip address 10.166.65.254 255.255.255.0
 ip nat inside
!
interface Ethernet0/0
 ip address 75.40.171.226 255.255.255.248
 ip nat outside
!
interface Serial0/0
 ip unnumbered Ethernet0/0
!
ip nat inside source list 2 interface Ethernet0/0 overload
ip nat inside source static tcp 10.166.65.50 4899 75.40.171.226 4899
extendable
ip classless
ip route 0.0.0.0 0.0.0.0 75.40.171.230
ip route 10.166.65.0 255.255.255.0 Serial0/0
ip route 10.166.65.50 255.255.255.255 Serial0/0
!
access-list 2 remark Outbound packets on ethernet
access-list 2 permit 10.166.65.0 0.0.0.255


RTR 2:


!
interface Ethernet0/0
 ip address 10.166.65.1 255.255.255.0
 half-duplex
!
interface Serial0/0
 ip unnumbered Ethernet0/0
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0


More information about the cisco-nsp mailing list