NAT question

Hi,

My installed a new link recently. However, when workstation connects to any passive FTP server. after entered username and password, it won't able to get directory listing. When I checked the NAT translation table, I saw some other NAT entries established with same port and same outside IP, but the inside source IP display the router NAT ip.

The INSPECT has been applied to both inside and outside interface, any idea what went wrong ? Is it related to the new link ? Here's sample result

tcp 139.131.62.222:1048 139.131.62.222:64177 64.13.142.66:80

64.13.142.66:80 tcp 139.131.62.222:1049 139.131.62.222:65395 64.13.142.66:80 64.13.142.66:80 tcp 139.131.62.222:50478 10.10.143.238:50478 64.13.142.66:80 64.13.142.66:80

Here's server PAT setting

ip nat inside source list IOS-NAT-OUT interface Vlan10 overload

interface G0/1 ip address 10.10.143.1 255.255.255.0 ip nat inside

interface Vlan10 ip address 139.131.62.222 255.255.255.252 ip nat outside

ip access-list extended IOS-NAT-OUT-YNR permit ip 10.10.143.0 0.0.0.255 any

read more and respond »

Posted 5 years ago by yellow in Cisco Systems

Report misuse