Help me with NAT

[bjgodby]

I cannot figure out why my config is not working. Can someone look at this output from my NAT router and tell me whats wrong?


Lab_A#
*Mar 1 01:13:57.847: NAT: translation failed (A), dropping packet s=192.168.20.
2 d=171.16.10.1
*Mar 1 01:13:57.999: NAT: translation failed (A), dropping packet s=192.168.20.
2 d=171.16.10.1
Lab_A#
*Mar 1 01:13:59.959: NAT: translation failed (A), dropping packet s=192.168.20.
2 d=171.16.10.1
*Mar 1 01:14:00.103: NAT: translation failed (A), dropping packet s=192.168.20.
2 d=171.16.10.1
Lab_A#
*Mar 1 01:14:02.035: NAT: translation failed (A), dropping packet s=192.168.20.
2 d=171.16.10.1
Lab_A#show run
Building configuration...

Current configuration : 1278 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname Lab_A
!
boot-start-marker
boot-end-marker
!
!
no aaa new-model
memory-size iomem 5
ip cef
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/0
ip address 171.16.10.2 255.255.255.0
ip nat outside
clock rate 2000000
!
interface FastEthernet0/1
no ip address
shutdown
duplex auto
speed auto
!
interface Serial0/1
ip address 192.168.20.1 255.255.255.0
ip nat inside
clock rate 2000000
!
interface Serial0/2
no ip address
shutdown
clock rate 2000000
!
interface Serial0/3
no ip address
shutdown
clock rate 2000000
!
router rip
passive-interface Serial0/0
network 171.16.0.0
network 192.168.20.0
!
ip route 171.16.0.0 255.255.0.0 171.16.10.1
!
ip http server
no ip http secure-server
ip nat pool lammle 171.16.10.100 171.16.10.100 netmask 0.0.0.255
ip nat inside source list 2 pool lammle overload
!
access-list 1 permit 192.168.20.0 0.0.0.255
access-list 1 permit 192.168.30.0 0.0.0.255
access-list 2 permit 192.168.20.0 0.0.0.255
access-list 2 permit 192.168.30.0 0.0.0.255
!
!
control-plane
!
!
!
line con 0
logging synchronous
line aux 0
line vty 0 4
!
!
end

Lab_A#

[topearemu]

Hi,
You need to use the command "no shutdown" on all the router's interfaces. Also, you need to reconfigure the Ip nat pool with this command:
!
no ip nat pool lammle 171.16.10.100 171.16.10.100 netmask 0.0.0.255
ip nat pool lammle 171.16.10.100 171.16.10.100 netmask 255.255.255.255
ip nat inside source list 1 pool lammle overload
!
access-list 1 permit 192.168.20.0 0.0.0.255
access-list 1 permit 192.168.30.0 0.0.0.255

This is all u need for it to work.

Tope

[Fuzz]

You must remember that if you specify netmask, you must give the subnet mask information, not wildcard information. Wildcards are used by ACLs to match packets. Netmask information is standard IP subnet mask.

Also you have 2 ACLs with exactly the same match criteria. You only need one ACL.

[D.bloge]

The standard way is to use an extra NIC. I doubt it is actually possible to do it with one single network card.