Thanks for the Info. This is no different than my configuration listed below:
version 12.3 service timestamps debug datetime msec service timestamps log datetime msec service password-encryption ! hostname Webber ! boot-start-marker boot-end-marker ! enable secret 5 xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx ! memory-size iomem 20 no aaa new-model ip subnet-zero ! ! no ip domain lookup ! ip cef ! username support privilege 15 password 7 xxxxxxxxxxxxxxxxxxxxxxx ! ! ! ! interface Ethernet0 ip address 64.39.164.230 255.255.255.248 ip nat outside full-duplex ! interface FastEthernet0 ip address 10.10.1.1 255.255.255.0 ip nat inside speed auto ! interface Serial0 ip address 209.183.134.162 255.255.255.252 ip nat outside ! ip nat inside source list 101 interface Serial0 overload
ip classless ip route 0.0.0.0 0.0.0.0 209.183.134.161 no ip http server ! access-list 98 permit 199.166.210.105 access-list 98 permit 209.183.254.0 0.0.0.255 access-list 98 permit 10.10.1.0 0.0.0.255 access-list 101 permit ip 10.10.1.0 0.0.0.255 any access-list 101 permit ip 64.39.164.0 0.0.0.255 any ! line con 0 password 7 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXX login local speed 115200 line aux 0 line vty 0 4 access-class 98 in password 7 XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX login local !
I gave you two different setup scenarios. I gave you one without NAT at all, and I gave you pointers to documents laying out a NAT setup. It appears you want to use the 2nd, so disreguard anything I said in the first config. (although if you didn't want NAT turned on for Eth0 just remove the 'ip nat outside' statement, and you'll be routing on Eth0 and NAT'ing on Fa0).
If you do want NAT on both interfaces, you don't want your public IPs on Ethernet0 in a NAT configuration setup. That will just NAT translate from 64.39.164.230/29 into 209.183.134.162/30 the way you have things setup. Most likely, you want Eth0 to have a different private IP range than Fa0 does for NAT on both.
Then you'll want to setup static 'ip nat' statements mapping the outside public IPs into private internal IPs.
I should have said here, that you appear to have taken off in a 3rd direction, in having NAT on one interface, and routed IPs on another. Is that correct?
Yes this is correct. Even a simple setup without the 2nd WIC and no nat, my routed IP's don't work. I have a feeling my ISP has not routed my block correctly.
Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here.
All logos and trade names are the property of their respective owners.