NAT Problem!
I have a 2600 router. The topology is like:
Pc===========Router2600=========Dlink Switch=========router2=====Internet
Pc IP: 192.168.100.2/24
Router Inside: 192.168.100.1/24
Router outside:192.168.44.64/24
Router(2) inside: 192.168.44.1/24
DNS: 202.125.148.204
Now, I am trying to implement NAT on the 2600 router. The configuration is as following:
Current configuration : 989 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname test
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$IBy2$G5/IpqWTsKf3Zy.Ygq5/g/
enable password 123456
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
no ip routing
no ip cef
!
interface FastEthernet0/0
ip address 192.168.44.64 255.255.255.0
ip nat outside
no ip route-cache
speed auto
full-duplex!
interface FastEthernet0/1
ip address 192.168.100.1 255.255.255.0
ip nat inside
no ip route-cache
speed auto
full-duplex
!
ip nat inside source list 1 interface FastEthernet0/1 overload
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.44.1
!
!
access-list 1 permit 192.168.100.0 0.0.0.255
!
snmp-server community test RO
snmp-server enable traps tty
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password 123456
login
!
!
!
end
test#
Now, after this configuration, from the pc i can ping the router's outside interface(192.168.44.64). But, i cant not reach to the second router's inside interface (192.168.44.1) and so the DNS (internet). From the router's console, i can reach to the DNS.
Now, what else should I do to get the nat running.
Thank you.
Pc===========Router2600=========Dlink Switch=========router2=====Internet
Pc IP: 192.168.100.2/24
Router Inside: 192.168.100.1/24
Router outside:192.168.44.64/24
Router(2) inside: 192.168.44.1/24
DNS: 202.125.148.204
Now, I am trying to implement NAT on the 2600 router. The configuration is as following:
Current configuration : 989 bytes
!
version 12.3
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname test
!
boot-start-marker
boot-end-marker
!
enable secret 5 $1$IBy2$G5/IpqWTsKf3Zy.Ygq5/g/
enable password 123456
!
no network-clock-participate slot 1
no network-clock-participate wic 0
no aaa new-model
ip subnet-zero
no ip routing
no ip cef
!
interface FastEthernet0/0
ip address 192.168.44.64 255.255.255.0
ip nat outside
no ip route-cache
speed auto
full-duplex!
interface FastEthernet0/1
ip address 192.168.100.1 255.255.255.0
ip nat inside
no ip route-cache
speed auto
full-duplex
!
ip nat inside source list 1 interface FastEthernet0/1 overload
ip http server
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.44.1
!
!
access-list 1 permit 192.168.100.0 0.0.0.255
!
snmp-server community test RO
snmp-server enable traps tty
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password 123456
login
!
!
!
end
test#
Now, after this configuration, from the pc i can ping the router's outside interface(192.168.44.64). But, i cant not reach to the second router's inside interface (192.168.44.1) and so the DNS (internet). From the router's console, i can reach to the DNS.
Now, what else should I do to get the nat running.
Thank you.
Comments
I am gonna try this tomorrow. Well, do you think that my rest of the configuration are ok and complete? Or I have to add something to get it going?
ip nat inside source list 1 interface FastEthernet0/0 overload
You have not enabled ip routing!!!!
Have a look at your config... 'no ip routing' this command will prevent the router from doing any sort of routing......
In global config mode please type 'ip routing' then try ping the gateway from the PC
Remember to save the config once you have successfully entered the command....
Odd to see the no ip routing command on a 2600 series router... I don't believe I have seen that before normally only on Multi-Layer switches...
Let me know how you go
BTW... Ensure you fix up your NAT statement as well and as dtlokee said ensure you removed the old NAT statement that was incorrect
CCNA | CCNA:Security | CCNP | CCIP
JNCIA:JUNOS | JNCIA:EX | JNCIS:ENT | JNCIS:SEC
JNCIS:SP | JNCIP:SP
I just did look at the nat config but the other lines.
cheers
By the way, when I faced problem then I went trough a lot of Tutorials including the cisco one on the net. I found one thing strange, that is this important command is missing everywhere. For someone new like me its not good.
Anyway, thanks for all your comments which guided me a lot.
Thanks!
not only for that. This is a more private (!) issue. Infact, i need one more network inside, where the already nated ip need further nating. Yes, indeed i need it.
I just have one ip, but i need several devices to play within a network owned by me.
However, thanks everyone.