We're Sorry, Full Content Access is for Members Only...

If you like to keep on reading, Become a Member Now! Here is Why:

  • Learn any CCNA, CCNP and CCIE R&S Topic. Explained As Simple As Possible.
  • Try for Just $1. The Best Dollar You've Ever Spent on Your Cisco Career!
  • Full Access to our 637 Lessons. More Lessons Added Every Week!
  • Content created by Rene Molenaar (CCIE #41726)

 

374 New Members signed up the last 30 days!

satisfaction-guaranteed

100% Satisfaction Guaranteed!
You may cancel your monthly membership at any time.
No Questions Asked!

Tags:


Forum Replies

  1. Hi Alfredo,

    The ASA (since 8.3) has different NAT “sections”:

    • 1:Manual
    • 2: Auto
    • 3: "after auto" Manual
    • The ASA will first process NAT rules in section 1, then 2 and finally 3.

      Here’s an example of manual NAT:

    ASA(config)# object network INTERNAL_SERVER
    ASA(config-network-object)# host 192.168.1.1
    
    ASA(config)# object network PUBLIC_IP
    ASA(config-network-object)# host 1.1.1.1
    
    ASA(config)# nat (INSIDE,OUTSIDE) source static INTERNAL_SERVER PUBLIC_IP
    

    The NAT rule has been configured globally, this section 1 rule is preferred over 2 and 3.

    Here’s an example for

    ... Continue reading in our forum

  2. Hi

    Can someone help cant figure out why my internal ip address wont get nat’ed

    R1 IOS 
    !
    hostname Router
    !
    boot-start-marker
    boot-end-marker
    !
    !
    !
    no aaa new-model
    ethernet lmi ce
    !
    !
    !
    mmi polling-interval 60
    no mmi auto-configure
    no mmi pvc
    mmi snmp-timeout 180
    !
    !
    !
    !
    !
    !
    !
    !
    !
    !
    !
    ip cef
    no ipv6 cef
    !
    multilink bundle-name authenticated
    !
    !
    !
    !
    !
    redundancy
    !
    !
    ! 
    !
    !
    !
    !
    !
    !
    !
    !
    !
    !
    !
    !
    interface GigabitEthernet0/0
     no ip address
     shutdown
     duplex auto
     speed auto
     media-type rj45
    !
    interface GigabitEthernet0/1
     ip address 192.168.1.1 255.255.255.0
     duplex
    ... Continue reading in our forum

  3. Hi Sunil,

    These are the pre < 8.3 commands to configure NAT.

    Let’s break down these commands:

    global (outside) 1 interface
    • global means we configure a global address pool.
    • (outside) means we define the pool on this interface (outside).
    • 1 is the ID of our pool.
    • interface means that we use PAT with the IP address on the interface.
    global (guestwifi) 1 interface

    Same as above but for the guestwifi interface.

    nat (outside) 1 10.10.10.0 255.255.255.0
    • (outside) this is the interface where the NAT network exists. The outside interface in this case.
    • 1
    ... Continue reading in our forum

  4. Hello Tejpal,

    I moved your post to the Dynamic NAT topic so it’s in the right place :slight_smile:

    If you disable ip routing then your router acts as a regular host device. The only way it can get out of its own subnet is if it has a default gateway. If not, it can only reach devices within its own subnet. Are you sure there is no default gateway on your host2?

    With ip routing enabled, a router will always check its local routing table. If you have a default gateway, it will ignore it…you will need a default route (0.0.0.0/0).

    Rene

32 more replies! Ask a question or join the discussion by visiting our Community Forum