- For individual users
- Instant access to solutions
- Ask your tech questions
- Start your 30-day Free Trial
Main Topics
Browse All TopicsI have an existing cisco-config with NAT (see below) , and I need to add a public ip to a vpn-firewall-device behind the cisco . I still need the NAT on the existing public ip .
The existing fixed ip is auto-assigned .
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname <alpha>
!
boot-start-marker
boot-end-marker
!
enable secret <pass>
enable password <pass>
!
no aaa new-model
!
resource policy
!
mmi polling-interval 60
no mmi auto-configure
no mmi pvc
mmi snmp-timeout 180
ip subnet-zero
no ip source-route
!
!
no ip dhcp use vrf connected
ip dhcp excluded-address 10.0.0.1 10.0.0.99
!
ip dhcp pool LAN
network 10.0.0.0 255.255.255.0
default-router 10.0.0.1
dns-server 195.238.2.21 195.238.2.22
!
ip dhcp pool lan
!
!
ip cef
no ip domain lookup
ip name-server 195.238.2.21
ip name-server 195.238.2.22
!
!
interface ATM0
no ip address
load-interval 30
shutdown
no atm ilmi-keepalive
dsl operating-mode auto
pvc 0/35
encapsulation aal5mux ppp dialer
dialer pool-member 1
!
!
interface FastEthernet0
ip address 10.0.0.1 255.255.255.0
ip nat inside
ip virtual-reassembly
shutdown
speed auto
full-duplex
no cdp enable
!
interface Dialer0
ip address negotiated
ip access-group 150 in
ip nat outside
ip virtual-reassembly
encapsulation ppp
dialer pool 1
dialer-group 1
ppp authentication chap callin
ppp chap hostname <user>@<isp>
ppp chap password <pass>
!
ip classless
ip default-network 0.0.0.0
ip route 0.0.0.0 0.0.0.0 Dialer0
ip route 127.0.0.0 255.0.0.0 Null0
ip route 172.16.0.0 255.240.0.0 Null0
ip route 192.168.0.0 255.255.0.0 Null0
ip http server
ip http access-class 2
!
ip nat inside source list 1 interface Dialer0 overload
ip nat inside source static tcp 10.0.0.2 80 interface Dialer0 80
ip nat inside source static tcp 10.0.0.2 25 interface Dialer0 25
!
access-list 1 permit any
access-list 2 permit 10.0.0.0 0.0.0.255
access-list 2 deny any
access-list 150 deny ip 127.0.0.0 0.255.255.255 any
access-list 150 deny ip 172.16.0.0 0.15.255.255 any
access-list 150 deny ip 192.168.0.0 0.0.255.255 any
access-list 150 permit ip any any
dialer-list 1 protocol ip permit
!
control-plane
!
!
line con 0
exec-timeout 0 0
line aux 0
line vty 0 4
password <pass>
login
!
no process cpu extended
no process cpu autoprofile hog
sntp server <sntpserver>
end
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.

Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
Business Accounts
Answer for Membership
by: S0larPosted on 2008-02-27 at 03:12:36ID: 20993019
ip nat inside source static ip.of.vpn.box new.pub.lic.ip