NAT problem

See if you can specify a source interface or address for the SLA traffic. If so specify the inside interface. This will get natted. I would be surprised if you can't.

You can with a ping, tftp ... for exmple. ip tftp source-interface

router#ping 14.12.24.2 sou Dot11Radio0

Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 14.12.24.2, timeout is 2 seconds: Packet sent with a source address of 10.88.37.129 !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max =3D 64/72/76 ms

router#sh ip nat tr Pro Inside global Inside local Outside local Outside global

icmp 92.10.38.48:0 10.88.37.129:0 14.12.24.2:0

I can't ping the destination regardless of the source address I use. Even if I use the Dialer0 interface as the source address/interface it fails, despite the fact that all internal traffic is being NATted with the address of this interface. This makes me think it may not actually be a NAT issue?

Any suggestions?

When you ping from the router, the source address of the packets is the interface the packet uses to get to the destinaton by default, so show ip route X.Y.211.0 ought to tell you.

Also all local traffic is considred to be inside as far as NAT is concerned so it may be natted as well.

You have:

so the ping from the router might also be natted. Try changing your ACL to:

Martin, That one is new to me. Usually of course you would never notice. I did check - well it's just my way and it is indeed true it seems:)

Amazing. Do you happen to have a pointer to any documentation regarding this?

Rudi,

Sorry I did not really think this through and jumped on your NAT diagnosis.

So the real issue seems to be that you have *no* communications over the ISDN to X.Y.211.0.

Do the intermediate routers have routes? Do the target and intermediate routers have *return* routes?

Does the ISDN come up? sh isdn stat L3 should be multi-something established

PPP? ?

Check that the packets are going out the dialer with deb ip packet

I see that you do not seem to have a dialer-group statement. But maybe you have just left it out of the post?

It's mentioned in the Usage Guidelines for the ip nat inside... command:

"Packets that enter the router through the inside interface and packets sourced from the router are checked against the access list for possible NAT candidates."

Oh dear! I did a bit of a search but of course the obvious did not occur to me.

Thanks.