Re: cisco static nat



so this "show run" should work for me? goal is to forwared traffic looking
for 10.1.1.200 to a server at 172.124.1.2, and traffic from 10.1.1.204 to a
server at 172.124.1.4 assuming 10.1.1.x are public ip's




Building configuration...

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname motolab
!
enable secret 5 $1$WH8Q$przb.w4LSb/doWjY9quSk1
enable password ***
!
ip subnet-zero
!
!
!
interface Ethernet0/0
ip address 172.124.1.1 255.255.255.0
no ip directed-broadcast
ip nat inside
no mop enabled
!
interface Ethernet0/0.1
no ip directed-broadcast
!
interface Serial0/0
ip address 10.1.1.93 255.255.0.0
no ip directed-broadcast
ip nat outside
!
interface Serial0/0.1
ip address 10.1.1.200 255.255.0.0
no ip directed-broadcast
ip nat outside
!
interface Serial0/0.2
ip address 10.1.1.204 255.255.0.0
no ip directed-broadcast
ip nat outside
!
ip nat inside source static 10.1.1.204 172.124.1.4
ip nat inside source static 10.1.1.200 172.124.1.2
ip classless
!
access-list 10 deny 192.168.0.6
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipx permit
banner motd ^C
Welcome! Welcome to the MotoSat lab 2610! IF you DARE mess wiht my
config, i'm gonna be on you like stink on ***. Have a nice day! :D
^C
!
line con 0
password ***
login
transport input none
line aux 0
line vty 0 4
password ***
login
!
end


"Neteng" <neteng.ccie@xxxxxxxxx> wrote in message
news:e$VAjW12GHA.2176@xxxxxxxxxxxxxxxxxxxxxxx
Use inside, not outside.
ip nat inside source static 10.1.1.200 172.124.1.2

You'll also have to add 'ip nat inside' and 'ip nat outside' to the
appropriate interfaces.

"the" <shirtrippa@xxxxxxxxxxx> wrote in message
news:unrocz02GHA.1268@xxxxxxxxxxxxxxxxxxxxxxx
Sorry for posting a cisco question here, but no other place seems to get
a
response.

I need to set up static nat on my cisco 2600 so that public IP's point to
a
specific internal IP. this is my topology: i have 10.1.1.93-210 as my
public ips, and 172.1.1.1 as my internal network. i want 10.1.1.200 to
forward to 172.124.1.2. my serial int is 10.1.1.93 with .200 as a sub
interface

im assuming my syntax would be
[code]
motolab(config)#ip nat outside source static 10.1.1.200 172.124.1.2
[/code]

the bad thing is, i have no way to test this in my lab environment, so i
kinda need it to work on the first try. show run on my lab router as
follows, if anyone can tell me where/if im wrong let me know.

[code]
Building configuration...

Current configuration:
!
version 12.0
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname motolab
!
enable secret 5 $1$WH8Q$przb.w4LSb/doWjY9quSk1
enable password woot
!
ip subnet-zero
!
!
!
interface Ethernet0/0
ip address 172.124.1.1 255.255.255.0
no ip directed-broadcast
no mop enabled
!
interface Ethernet0/0.1
no ip directed-broadcast
!
interface Serial0/0
ip address 10.1.1.93 255.255.0.0
no ip directed-broadcast
!
interface Serial0/0.1
ip address 10.1.1.200 255.255.0.0
no ip directed-broadcast
!
interface Serial0/0.2
ip address 10.1.1.204 255.255.0.0
no ip directed-broadcast
!
ip nat outside source static 10.1.1.200 172.124.1.4
ip classless
!
access-list 10 deny 192.168.0.6
dialer-list 1 protocol ip permit
dialer-list 1 protocol ipx permit
banner motd ^C
Welcome! Welcome to the MotoSat lab 2610! IF you DARE mess wiht my
config, i'm gonna be on you like stink on poopie. Have a nice day! :D
^C
!
line con 0
password woot
login
transport input none
line aux 0
line vty 0 4
password woot
login
!
end
[/code]






.