OK, let's try it again, with content this time:
On 15 Oct 2000 11:05:44 -0400, GNOME <[EMAIL PROTECTED]> wrote:
:Pls see the following sample config
:
:int serial1/0
: ip address 200.10.10.1 255.255.255.252
: ip nat outside
:
:int fastethernet 0/0
: ip address 172.16.0.1 255.255.255.0
: ip nat inside
:
:int fastethernet 1/0
: ip address 201.0.0.1 255.255.255.0
: ip nat inside
:!
:ip nat pool provider 203.100.100.150 203.100.100.180 netmask 255.255.255.0
:ip nat inside source list 5 pool provider overload
:!
:access-list 5 permit 172.16.0.0 0.15.255.255
:
:Question 1
:if someone access a server (201.0.0.2) coming into Serial 1/0, will the
:router translate the destination ip address?
No. You've specified it an an inside NAT interface, with no translation
defined. You would need to set up a static translation to NAT from an
outside IP to an inside IP. For example, assume that your server is on
201.0.0.2 and you want to map 203.100.100.2 to it. You would need to add
the configuration line:
ip nat inside source static 201.0.0.2 203.100.100.2
for each server that you want to statically map.
:Question 2
:Like wise, if the return traffic from 201.0.0.2 going out from Serial 1/0,
:will the ip get translated?
Yes, if it is either defined by a static mapping or part of a pool. No,
the way you have it.
:If i don't put "IP NAT INSIDE" at Fastethernet 1/0, when i try to ping (for
:example) from 201.0.0.2 going out from Serial 1/0, seems like cannot ping
I would think you want it to be NAT outside if you want the 201.0.0.2
address to be visible as such (and not translated to something different)
on the outside interface.
What is the problem you are trying to solve? Do you want to have the
servers on 201.0.0.1/24 appear on the outside with their native IP
addresses, or do you want to translate them? If you want them translated,
to what global address(es) and with what mapping?
--
Jay Hennigan - Network Administration - [EMAIL PROTECTED]
NetLojix Communications, Inc. NASDAQ: NETX - http://www.netlojix.com/
WestNet: Connecting you to the planet. 805 884-6323
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
