[c-nsp] Doubt Cisco NAT

[Everton Diniz]

Hi Dave, the config are correct.
I wasn´t get access because the assymetric routes that i was put.

Now its ok....tkss


On 8/31/06, David Prall <dcp at dcptech.com> wrote:
>
> Everton,
> Are you sure the outside netmask is correct. You can only have 2 address
> on
> the outside interface. One has to be the local address and the other the
> next-hop, so you don't have an address to nat to outside the physical
> interface.
>
> David
>
> --
> David C Prall dcp at dcptech.com http://dcp.dcptech.com
>
>
> > -----Original Message-----
> > From: cisco-nsp-bounces at puck.nether.net
> > [mailto:cisco-nsp-bounces at puck.nether.net] On Behalf Of Everton Diniz
> > Sent: Monday, August 28, 2006 10:33 AM
> > To: cisco-nsp at puck.nether.net
> > Subject: [c-nsp] Doubt Cisco NAT
> >
> > I want to do a NAT where a host on the internet access the
> > server on my
> > network.
> >
> > interface FastEthernet0/0
> >  ip address 200.162.xx.xx 255.255.255.252
> >  ip nat outside
> >  no ip mroute-cache
> >  duplex auto
> >  speed auto
> >  no cdp enable
> >
> > interface FastEthernet0/1
> >  ip address 10.90.4.5 255.255.255.252
> >  no ip redirects
> >  no ip unreachables
> >  no ip proxy-arp
> >  ip nat inside
> >  no ip mroute-cache
> >  duplex auto
> >  speed auto
> >  no cdp enable
> >
> > ip nat inside source static 10.90.3.2 200.162.xx.xy
> > ip route 10.90.3.0 255.255.255.224 10.90.4.6
> >
> > The syntax for the NAT config is correct??
> > ip nat inside source static <IP Inside network> <IP that
> > users outside know>
> >
> > I see this logs.
> > Aug 28 14:29:53: NAT: o: tcp (200.162.xx.zz, 60402) ->
> > (200.162.xx.xy, 80)
> > [1929]
> > Aug 28 14:29:53: NAT: s=200.162.xx.zz,
> > d=200.162.xx.xy->10.90.3.2 [1929]
> >
> > Tks,
> >
> > -Everton
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
>
>