IP nat inside source command.
Bookmark this page:
 Yahoo!
 Google
 Windows Live
 del.icio.us
 digg
 Netscape
|
|
|||||||||||||
|
Posted by sodethman@gmail.com on July 14, 2006, 9:53 am
Please log in for more thread options command poingting to different serial ports. I have tried putting the commands twice but the last one always replaces the first one. Below is the full command I am talking about. Thank you. ip nat inside source list 155 interface Serial3/0 overload | |||||||||||||
|
Posted by on July 14, 2006, 3:22 pm
Please log in for more thread options sodethman@gmail.com wrote: Yes you can. (I guess) My understanding is that when "NAT" is configured it is "activated" by a packet crossing from a NAT "inside" interface to a NAT "outside" interface (and/or/sometimes vice versa). When such a packet is being processed the "ip nat ..." commands are scanned for a match. If an interface was specified in the NAT command I would hope that this was considered when looking for a match. Maybe you need to specify a different ACL from 155 for the other command. This other ACL could of course have identical contents. I seem to recall some recommendation that the same ACL should not be used for different purposes. This problem does surprise me, but I cannot recall dealing with NAT in a case where there was more than one outside interface. We live in dreary times:-) I have now done a wee test. ip nat inside source list 180 interface Loopback20 overload ip nat inside source list 181 interface Loopback10 overload I had to specify two ACLs as suspected. Let's hope that you get the result that you want. It is possible that if the lists are identical then the first matching ACL will always be used even if the traffic is heading out of different interface from the one specified in the NAT command. Yours quite surprised. | |||||||||||||
| Similar Threads | Posted |
| IP nat inside source command. | July 14, 2006, 9:53 am |
| command equivalent in PIX version 6.3 for the version 7.x command: same-security-traffic permit inter-interface | December 11, 2006, 1:20 pm |
| Configuring an inside nat group on inside interface | April 10, 2006, 4:38 pm |
| Cisco 837 - how to set up Inside to Inside NAT for DNS resolution? | May 23, 2006, 2:00 pm |
| Source Group | January 4, 2006, 1:36 am |
| ....source based pbr + bgp? | January 30, 2006, 5:59 pm |
| bgp source routing | February 22, 2006, 8:12 am |
| Source and destination NAT | June 25, 2007, 11:20 pm |
| source nat in pix 506 for vpn clients | March 21, 2008, 9:27 am |
| Source IP address | December 9, 2008, 5:07 am |
| AAA with loopback as source ip address | January 10, 2006, 11:09 am |
| Source for CISCO Routers ! | January 15, 2006, 7:23 am |
| Static and Source IP when on the Internet | May 20, 2006, 1:43 pm |
| CSS 11506 - Source address | August 25, 2006, 5:47 am |
| T3 timing - clock source | September 14, 2006, 11:22 am |
> command poingting to different serial ports. I have tried putting the
> commands twice but the last one always replaces the first one. Below
> is the full command I am talking about. Thank you.
>
> ip nat inside source list 155 interface Serial3/0 overload