2013年6月24日星期一

NAT Configuration Confirm


Question:

I have a 2811 router that WS-C3750X-48PF-S Price I need to confirm NAT configurations as expected. I have 2 deviced on the internal LAN that need to access remote resources without PAT. All the other devices are for a guest network with PAT. My interface Fa0/0 is connected to local network (1.1.1.1/23). Fa0/1 is connected to ISP (10.10.10.178/30). Addressable range from ISP of 10.10.10.192/28 (10.10.10.193-10.10.10.206). Internal machine 1.1.1.2 & 1.1.1.3 must connect to a remote server through internet on spacific port numbers. Attached is the configuration I have.

Answer:

It would be easier if you just configure static NAT.

ip nat inside source static 1.1.1.2 10.10.10.193
ip nat inside source static 1.1.1.3 10.10.10.194

no ip nat pool static1 10.10.10.193 10.10.10.194 prefix-length 28
no ip nat inside source list 2 pool static1
no ip nat inside source list 3 pool static1

Local devices 1.1.1.2 and 1.1.1.3 wil be visible from internet as 10.10.10.193, 10.10.10.194 WS-C3750X-48PF-L respectively.

没有评论:

发表评论