SNAT

Nov 08, 2005 1 Replies

Hi folks



I have some problems doing SNAT. Here is my router's configuration.



interface FastEthernet0/0.6 encapsulation dot1Q 6 ip address 10.10.12.4 255.255.255.0 ip nat inside



interface FastEthernet0/0.33 encapsulation dot1Q 33 ip address 94.200.15.253 255.255.255.0 secondary ip address 192.168.99.253 255.255.255.0 ip nat outside



ip nat inside source route-map EUREX1 interface FastEthernet0/0.33 overload



route-map EUREX1 permit 1 match ip next-hop 33



access-list 33 permit 192.168.99.0 0.0.0.255 access-list 33 permit 94.200.15.0 0.0.0.255


If i do #sh ip nat trans



i get Pro Inside global Inside local Outside local Outside global udp 192.168.99.253:4698 10.10.12.36:4698 94.200.15.21:161 94.200.15.21:161 # inside global should be 94.200.15.253 udp 192.168.99.253:4699 10.10.12.36:4699 94.200.15.21:161 94.200.15.21:161 # inside global should be 94.200.15.253 udp 192.168.99.253:4698 10.10.12.36:4698 192.168.99.21:161 192.168.99.21:161 udp 192.168.99.253:4699 10.10.12.36:4699 192.168.99.21:161 192.168.99.21:161



I tried to set up different subinterfaces for network 192.168.99.0 and



94.200.15.0 but both networks are in the same VLAN and my IOS tells me that VLAN ID 6 is already used by an other interface.

I can't use different interfaces for both networks because i am already using all of the 4 installed fastethernet interfaces. I'm using an Cisco 3620 with IOS C3620-IS-M, Version 12.2(16)



So what can i do to set this up correctly?



Hope someone can help.



Regards,



Andre



I don't think you can overload using a secondary address (could be wrong). Your best bet would be to get an IP for each segment that you can use in a single address pool and overload the pool. Then you would be able to use the route map to dictate which pool should be used based on source address, much like you currently have.

Join the Discussion

Have something to add? Share your thoughts — no account required.

Didn't find your answer?

Ask the community — no account required