Thanks Tyson.
Best Regards. ______________________ Adil On Jun 25, 2011, at 2:15 AM, Tyson Scott wrote: > Adil, > > It all depends on the order of operation. Don't want to get into a control > plane debate here again but the log message is done at the control plane and > the NAT is data plane. Thus the debug will show the original address. > > Regards, > > Tyson Scott - CCIE #13513 R&S, Security, and SP > Managing Partner / Sr. Instructor - IPexpert, Inc. > Mailto: [email protected] > Telephone: +1.810.326.1444, ext. 208 > Live Assistance, Please visit: www.ipexpert.com/chat > eFax: +1.810.454.0130 > > IPexpert is a premier provider of Self-Study Workbooks, Video on Demand, > Audio Tools, Online Hardware Rental and Classroom Training for the Cisco CCIE > (R&S, Voice, Security & Service Provider) certification(s) with training > locations throughout the United States, Europe, South Asia and Australia. Be > sure to visit our online communities at www.ipexpert.com/communities and our > public website at www.ipexpert.com > > From: [email protected] > [mailto:[email protected]] On Behalf Of Adil Pasha > Sent: Thursday, June 23, 2011 8:58 AM > To: Kingsley Charles > Cc: [email protected] Maillist > Subject: Re: [OSL | CCIE_Security] YB Lab 1 - Q-7.2. > > Thanks. > > I will try and let you know. > > But you see that it is working it is just the cosmetics of not seeing the > correct stats on "ip nat translation" > > > Best Regards. > ______________________ > Adil > > On Jun 23, 2011, at 8:22 AM, Kingsley Charles wrote: > > > Can you configure specific access-list for the route-maps as following and > try... > > > access-list 102 permit ip host 10.55.55.55 192.168.65.0 0.0.0.255 > access-list 103 permit ip host 10.55.55.55 192.168.35.0 0.0.0.255 > ! > route-map s2 permit 10 > match ip address 103 > set interface Serial0/2/0 > ! > route-map s1 permit 10 > match ip address 102 > set interface Serial0/1/0 > > With regards > Kings > > On Thu, Jun 23, 2011 at 5:42 PM, Adil Pasha <[email protected]> wrote: > Thanks Kingsley. > > Here is the config: > > > R5: > ! > interface Loopback5 > ip address 10.55.55.55 255.255.255.255 > ip nat inside > ip virtual-reassembly > ! > ! > interface Serial0/1/0 > description IPEXPERT uses this interface for CENTRAL segment for YB Practice > Lab 1 > ip address 192.168.65.5 255.255.255.0 > ip nat outside > ip virtual-reassembly > encapsulation frame-relay > ip ospf network point-to-point > frame-relay map ip 192.168.65.6 506 broadcast > no frame-relay inverse-arp > crypto map lmap > ! > interface Serial0/2/0 > description DTE side - Link to R3 DCE s0/2/0 > ip address 192.168.35.5 255.255.255.0 > ip nat outside > ip virtual-reassembly > encapsulation ppp > ip ospf network point-to-point > no fair-queue > crypto map lmap > ! > ip nat inside source route-map s1 interface Serial0/1/0 overload > ip nat inside source route-map s2 interface Serial0/2/0 overload > ! > access-list 102 permit ip host 10.55.55.55 any > ! > route-map s2 permit 10 > match ip address 102 > set interface Serial0/2/0 > ! > route-map s1 permit 10 > match ip address 102 > set interface Serial0/1/0 > ! > end > > > > Best Regards. > ______________________ > Adil > > On Jun 23, 2011, at 12:59 AM, Kingsley Charles wrote: > > > Configuration please..... > > On Wed, Jun 22, 2011 at 9:57 PM, Adil Pasha <[email protected]> wrote: > Hi guys, > > This is about NAT question. > > For some reason I am not seeing the correct NAT'd address when I PING from R3 > to R5 even though the ICMP is being sent from 192.168.35.3 to R5 and R5 > replies with NAT'd address as you can see on R3' debug. > > R3# > *Jun 22 16:25:48.462: ICMP: echo reply rcvd, src 192.168.65.5, dst > 192.168.35.3 > *Jun 22 16:25:48.462: ICMP: echo reply rcvd, src 192.168.65.5, dst > 192.168.35.3 > *Jun 22 16:25:48.466: ICMP: echo reply rcvd, src 192.168.65.5, dst > 192.168.35.3 > *Jun 22 16:25:48.470: ICMP: echo reply rcvd, src 192.168.65.5, dst > 192.168.35.3 > *Jun 22 16:25:48.474: ICMP: echo reply rcvd, src 192.168.65.5, dst > 192.168.35.3 > R3# > > R5# > Jun 22 18:39:26.547: ICMP: echo reply sent, src 10.55.55.55, dst 192.168.35.3 > Jun 22 18:39:26.551: ICMP: echo reply sent, src 10.55.55.55, dst 192.168.35.3 > Jun 22 18:39:26.555: ICMP: echo reply sent, src 10.55.55.55, dst 192.168.35.3 > Jun 22 18:39:26.559: ICMP: echo reply sent, src 10.55.55.55, dst 192.168.35.3 > Jun 22 18:39:26.559: ICMP: echo reply sent, src 10.55.55.55, dst 192.168.35.3 > R5#sh ip nat tran > > When I check the NAT it is not 192.168..35.5. Could it be a bug or my error? > > R5#sh ip nat translations > Pro Inside global Inside local Outside local Outside global > icmp 192.168.65.5:3 10.55.55.55:3 192.168.35.3:3 192.168.35.3:3 > R5# > > > Best Regards. > ______________________ > Adil > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > > Are you a CCNP or CCIE and looking for a job? Check out > www.PlatinumPlacement.com > > > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com Are you a CCNP or CCIE and looking for a job? Check out www.PlatinumPlacement.com
