Got it

NAT configuration

Created: Jan 30, 2021 14:00:46Latest reply: Jan 30, 2021 14:03:44 349 1 0 0 0
  Rewarded HiCoins: 0 (problem resolved)

Hi,

Due to the lack of available public addresses, we configure the NAT of the private LAN on the network address 2.2.2.0 (LAN network address 2.2.2.0/30).

The NAT is ALG type.

We want to do this:

 

  GE0/0/3                          GE0/0/2

ROUTER1---2.2.2.0/30--ROUTER2

    .1                                   .2


ROUTER1

interface GE0/0/3

            undo portswitch

            IP address 2.2.2.1 255.255.255.252

            nat outbound 2001 address-group 1

 

nat address-group 1 2.2.2.0 2.2.2.0

 

ROUTER2

interface GE0/0/2

            undo portswitch

            IP address 2.2.2.2 255.255.255.252

  

Please let me know if is ok to configure in this way.


  • x
  • convention:

Featured Answers
Popeye_Wang
Admin Created Jan 30, 2021 14:03:44

Hi,

Based on the current configuration, you use the first IP of the subnet to do the NAT, I am afraid the upstream device couldn't forward the reverse traffic flow since this is the network address of this subnet. So the upstream device can't learn ARP.

Since now only has 1 IP address in the IP pool, it is advised to use the interface IP directly to do the NAT which is called the easy-IP method. It is easy to configure and commonly used by other customers. You can configure like below:

interface GE0/0/3

   undo portswitch

  IP address 2.2.2.1 255.255.255.252

  nat outbound 2001   //no need to define IP pool for easy-IP.



View more
  • x
  • convention:

All Answers
Popeye_Wang
Popeye_Wang Admin Created Jan 30, 2021 14:03:44

Hi,

Based on the current configuration, you use the first IP of the subnet to do the NAT, I am afraid the upstream device couldn't forward the reverse traffic flow since this is the network address of this subnet. So the upstream device can't learn ARP.

Since now only has 1 IP address in the IP pool, it is advised to use the interface IP directly to do the NAT which is called the easy-IP method. It is easy to configure and commonly used by other customers. You can configure like below:

interface GE0/0/3

   undo portswitch

  IP address 2.2.2.1 255.255.255.252

  nat outbound 2001   //no need to define IP pool for easy-IP.



View more
  • x
  • convention:

Comment

You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.