NAT oveload on THREE interfaces??

fonestar1978fonestar1978 Banned Posts: 55 ■■□□□□□□□□
Hi there, I am getting ready for my CCNA course starting in January. I already have the CCENT so I feel a little dumb having this problem but here goes.

I have a Cisco 2600 receiving DHCP address to e0/1 (going thru a wireless bridge)
A Cisco 2500 connected to the 2600 via Serial0
and an XP machine connected to the 2600

the 2500 is on network on s0/0
the XP (connected to the 2600) on e0/0
the wireless bridge is DHCP'd (to the 2600) at on e0/1

The XP machine can get onto the internet thru the 2600, it can also ping the 2500 (
The Cisco 2600 can ping the public internet, the 2500 and the XP machine.
The Cisco 2500 can ping the XP machine, and both e0/0 and s0/0 on the 2600.

The Cisco 2500 can NOT make the gateway ( or the public internet.

Debug on the 2600 doesn't even show a request for the address.

I have tried configuring the 2600 with a static route for the 2500 and it still doesn't work ie:

ip route e0/1

When I tried configuring the s0/0 interface of the 2600 to use ip nat outside it just hangs. Can I configure both Ethernet interfaces of the 2600 to use PAT?? And the e0/1 interface to overload both? Any ideas are much appreciated as I've been Googling alot over the last three days, everything just gives and example of one Ethernet interface using PAT and thru to a Modem. Doesn't deal with a second router or interface!

Thanks in advance!!


  • Options
    dtlokeedtlokee Member Posts: 2,378 ■■■■□□□□□□
    I don't fully understand your scenario but you can use multiple nat inside and a single NAT outside interface.
    interface eth0/0
    ip nat inside
    ip address
    interface eth0/1
    ip nat inside
    ip address
    int serial 0/0
    ip nat outside
    ip address
    access-list 10 permit
    access-list 10 permit
    ip nat inside source list 10 interface serial 0/0 overload

    That should get you going. Also your static rout example won't work, you used a wildcard mask and it requires a subnet mask. Additionally you would not want to use an exit interface that is a Ethernet interface, you should put the IP address of the next hop router.
    The only easy day was yesterday!
  • Options
    fonestar1978fonestar1978 Banned Posts: 55 ■■□□□□□□□□
    Thanks that helped half of it!!

    The Cisco 2500 can now ping through the 2600. It still cannot ping URL's or ip addresses. I think this may be a DHCP issue now as the Default Router (WRT54G running dd-wrt White Russian 2.4) is configured to hand out DHCP addresses.

    Or else it's a NAT issue on the 2500 or 2600.

    I don't think the s0 interface of the 2500 should need to perform *any* NAT if it is directly connected to the 2600 and the 2600 is already performing NAT? Does that sound right??

Sign In or Register to comment.