routing and nat problem

Apr 03, 2006 1 Replies

Hi,



sorry if the question is silly, but I'm a newby. Any pointer and reference to useful docs to solve my trouble is welcome (it is, thx for RTFM and links).



My problem is that our internal LAN 192.168.aaa.0/24 should change gw to allow Internet access. Before we go out by mean of a fortigate 60 fw that did NAT. Now we have to use our internal cisco 2600 direct connected to another cisco on a 10.X.Y.Z/25 on the way to inet.



I tried to do the following things:


- changing default gateway:



before on our 2600 config was



ip route 0.0.0.0 0.0.0.0 192.168.aaa.bbb (the fortigate fw IP on our internal lan)



now is



ip route 0.0.0.0 0.0.0.0 10.AAA.BBB.CCC (the cisco IP direct connected to our router)


- then I defined the natting this way:



On the eth interface connected to the switch of our internal lan:



"interface Ethernet0/0 ip address 192.168.aaa.zzz 255.255.255.0 ip nat inside"



On the eth interface direct connected to the other router:



"interface Ethernet0/1 ip address 10.AAA.BBB.CCC 255.255.255.128 ip nat outside"



then



"ip nat inside source list 1 interface Ethernet0/1 overload "



and



"access-list 1 permit 192.168.aaa.0" (our 192.168.aaa.0/24 lan)



I think that maybe I missed some piece, because if I give the command show ip nat translations there are no output.



Thanks to all replying people and best regards to everybody,



Andrea



errata corrige:

"interface Ethernet0/1 ip address 10.AAA.BBB.CCC 255.255.255.128"

has had been:

"interface Ethernet0/1 ip address 10.AAA.BBB.CCD 255.255.255.128"

It is, that is not the same address of the interface of the gw router outside our lan.

And then also the connectivity is OK, not only because I can ping the other router from the mine, but also because from my router I can traceroute to hosts on the 10.XXX.YYY.ZZZ net that I can only access because I connected to the other router.

Andrea

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required