Here's config:
everything working fine except:
ip nat inside source static tcp 172.16.1.29 20 AAA.AAA.AAA.172 20 extendable
ip nat inside source static tcp 172.16.1.29 21 AAA.AAA.AAA.172 21 extendable
because 172.16.1.x network is independent and has i it's own default route that's why we need to translate these packets once more, to make 172.16.1.29 host to recieve these packets with srcaddr of 172.16.1.2. So, i need help with this second static translation...
-------------------------
Current configuration : 3717 bytes
!
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname c2851
!
boot-start-marker
boot-end-marker
!
enable secret 5 xxxxxxxxxxxxxxxxxxx
enable password xxxxxxxxxxxxxx
!
aaa new-model
!
!
aaa authentication login default local
aaa authentication ppp default local group radius
aaa authorization exec default local
aaa authorization network default group radius if-authenticated
!
!
aaa session-id common
!
!
ip cef
!
!
no ip domain lookup
ip domain name xxxxxxxx.com
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
ip dhcp-server 10.0.0.x
!
multilink bundle-name authenticated
!
vpdn enable
!
vpdn-group 1
! Default PPTP VPDN group
accept-dialin
protocol pptp
virtual-template 1
l2tp tunnel receive-window 1024
ip pmtu
ip mtu adjust
!
!
voice-card 0
no dspfarm
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
username xxxxxx privilege 15 password 0 xxxxxxx
archive
log config
hidekeys
!
!
!
!
ip ssh time-out 60
ip ssh authentication-retries 2
ip ssh version 2
!
!
!
!
interface GigabitEthernet0/0
description LAN
ip address 10.0.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
no mop enabled
!
interface GigabitEthernet0/1
description TO_LAN2
ip address 172.16.1.2 255.255.255.224
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/1/0
description TO_ISP1
ip address AAA.AAA.AAA.170 255.255.255.248
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface FastEthernet0/3/0
description TO_ISP2
ip address BBB.BBB.BBB.BB2 255.255.255.224
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
!
interface Virtual-Template1
ip unnumbered GigabitEthernet0/0
ip nat inside
ip virtual-reassembly
ip tcp adjust-mss 1400
autodetect encapsulation ppp
peer default ip address dhcp
compress mppc
ppp encrypt mppe auto
ppp authentication ms-chap-v2 callin
!
ip forward-protocol nd
ip route 0.0.0.0 0.0.0.0 AAA.AAA.AAA.169 10
ip route 0.0.0.0 0.0.0.0 BBB.BBB.BBB.BB1 50
ip route 192.168.193.0 255.255.255.0 10.0.0.254
ip route 192.168.200.0 255.255.255.0 10.0.0.254
ip route 192.168.212.0 255.255.255.0 172.16.1.3
!
!
no ip http server
no ip http secure-server
ip nat inside source list 1 interface FastEthernet0/1/0 overload
ip nat inside source list 1 interface FastEthernet0/3/0 overload
ip nat inside source static tcp 10.0.0.10 20 AAA.AAA.AAA.171 20 extendable
ip nat inside source static tcp 10.0.0.10 21 AAA.AAA.AAA.171 21 extendable
ip nat inside source static tcp 10.0.0.2 25 AAA.AAA.AAA.171 25 extendable
ip nat inside source static tcp 10.0.0.7 443 AAA.AAA.AAA.171 443 extendable
ip nat inside source static tcp 172.16.1.29 20 AAA.AAA.AAA.172 20 extendable
ip nat inside source static tcp 172.16.1.29 21 AAA.AAA.AAA.172 21 extendable
ip nat inside source static tcp 10.0.0.10 20 BBB.BBB.BBB.BB2 20 extendable
ip nat inside source static tcp 10.0.0.10 21 BBB.BBB.BBB.BB2 21 extendable
ip nat inside source static tcp 10.0.0.2 25 BBB.BBB.BBB.BB2 25 extendable
ip nat inside source static tcp 10.0.0.7 443 BBB.BBB.BBB.BB2 443 extendable
!
access-list 1 permit 10.0.0.0 0.0.0.255
access-list 2 permit 172.16.1.29
!
!
!
!
!
!
radius-server configure-nas
radius-server host 10.0.0.y auth-port 1645 acct-port 1646
radius-server key zzzzzzz
!
control-plane
!
!
!
!
!
!
!
!
!
!
line con 0
line aux 0
line vty 0 4
password xxxxxxxxx
transport input ssh
!
scheduler allocate 20000 1000
!
end
Main Topics
Browse All Topics





by: aconaway1Posted on 2008-02-25 at 14:57:24ID: 20980135
How don't see how point A is working. Can you post a config?