Adil,
It all depends on the order of operation. Don't want to get into a control plane debate here again but the log message is done at the control plane and the NAT is data plane. Thus the debug will show the original address. Regards, Tyson Scott - CCIE #13513 R&S, Security, and SP Managing Partner / Sr. Instructor - IPexpert, Inc. Mailto: <mailto:[email protected]> [email protected] Telephone: +1.810.326.1444, ext. 208 Live Assistance, Please visit: <http://www.ipexpert.com/chat> www.ipexpert.com/chat eFax: +1.810.454.0130 IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE (R&S, Voice, Security & Service Provider) certification(s) with training locations throughout the United States, Europe, South Asia and Australia. Be sure to visit our online communities at <http://www.ipexpert.com/communities> www.ipexpert.com/communities and our public website at <http://www.ipexpert.com/> www.ipexpert.com From: [email protected] [mailto:[email protected]] On Behalf Of Adil Pasha Sent: Thursday, June 23, 2011 8:58 AM To: Kingsley Charles Cc: [email protected] Maillist Subject: Re: [OSL | CCIE_Security] YB Lab 1 - Q-7.2. Thanks. I will try and let you know. But you see that it is working it is just the cosmetics of not seeing the correct stats on "ip nat translation" Best Regards. ______________________ Adil On Jun 23, 2011, at 8:22 AM, Kingsley Charles wrote: Can you configure specific access-list for the route-maps as following and try... access-list 102 permit ip host 10.55.55.55 192.168.65.0 0.0.0.255 access-list 103 permit ip host 10.55.55.55 192.168.35.0 0.0.0.255 ! route-map s2 permit 10 match ip address 103 set interface Serial0/2/0 ! route-map s1 permit 10 match ip address 102 set interface Serial0/1/0 With regards Kings On Thu, Jun 23, 2011 at 5:42 PM, Adil Pasha <[email protected]> wrote: Thanks Kingsley. Here is the config: R5: ! interface Loopback5 ip address 10.55.55.55 255.255.255.255 ip nat inside ip virtual-reassembly ! ! interface Serial0/1/0 description IPEXPERT uses this interface for CENTRAL segment for YB Practice Lab 1 ip address 192.168.65.5 255.255.255.0 ip nat outside ip virtual-reassembly encapsulation frame-relay ip ospf network point-to-point frame-relay map ip 192.168.65.6 506 broadcast no frame-relay inverse-arp crypto map lmap ! interface Serial0/2/0 description DTE side - Link to R3 DCE s0/2/0 ip address 192.168.35.5 255.255.255.0 ip nat outside ip virtual-reassembly encapsulation ppp ip ospf network point-to-point no fair-queue crypto map lmap ! ip nat inside source route-map s1 interface Serial0/1/0 overload ip nat inside source route-map s2 interface Serial0/2/0 overload ! access-list 102 permit ip host 10.55.55.55 any ! route-map s2 permit 10 match ip address 102 set interface Serial0/2/0 ! route-map s1 permit 10 match ip address 102 set interface Serial0/1/0 ! end Best Regards. ______________________ Adil On Jun 23, 2011, at 12:59 AM, Kingsley Charles wrote: Configuration please..... On Wed, Jun 22, 2011 at 9:57 PM, Adil Pasha <[email protected]> wrote: Hi guys, This is about NAT question. For some reason I am not seeing the correct NAT'd address when I PING from R3 to R5 even though the ICMP is being sent from 192.168.35.3 to R5 and R5 replies with NAT'd address as you can see on R3' debug. R3# *Jun 22 16:25:48.462: ICMP: echo reply rcvd, src 192.168.65.5, dst 192.168.35.3 *Jun 22 16:25:48.462: ICMP: echo reply rcvd, src 192.168.65.5, dst 192.168.35.3 *Jun 22 16:25:48.466: ICMP: echo reply rcvd, src 192.168.65.5, dst 192.168.35.3 *Jun 22 16:25:48.470: ICMP: echo reply rcvd, src 192.168.65.5, dst 192.168.35.3 *Jun 22 16:25:48.474: ICMP: echo reply rcvd, src 192.168.65.5, dst 192.168.35.3 R3# R5# Jun 22 18:39:26.547: ICMP: echo reply sent, src 10.55.55.55, dst 192.168.35.3 Jun 22 18:39:26.551: ICMP: echo reply sent, src 10.55.55.55, dst 192.168.35.3 Jun 22 18:39:26.555: ICMP: echo reply sent, src 10.55.55.55, dst 192.168.35.3 Jun 22 18:39:26.559: ICMP: echo reply sent, src 10.55.55.55, dst 192.168.35.3 Jun 22 18:39:26.559: ICMP: echo reply sent, src 10.55.55.55, dst 192.168.35.3 R5#sh ip nat tran When I check the NAT it is not 192.168..35.5. Could it be a bug or my error? R5#sh ip nat translations Pro Inside global Inside local Outside local Outside global icmp 192.168.65.5:3 <http://192.168.65.5:3/> 10.55.55.55:3 <http://10.55.55.55:3/> 192.168.35.3:3 <http://192.168.35.3:3/> 192.168.35.3:3 <http://192.168.35.3:3/> R5# Best Regards. ______________________ Adil _______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com <http://www.ipexpert.com/> Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com <http://www.PlatinumPlacement.com/>
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
