Cisco Router 1700 Seies NAT configuration issues

Ok I have a Cisco 1700 series hooked to a t-1. It's currently set up with nat polling.  What I would like to do is reconfigure the router to setup a firewall behind the router with external ips, but I don't know how to do it..  here is the current configuration:

User Access Verification

Password:
router>enable
Password:
% Password:  timeout expired!
Password:
% Password:  timeout expired!
Password:
remacc#show config
Using 1069 out of 29688 bytes
!
version 12.2
service config
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname router!
enable secret
enable password XXXXX
!
memory-size iomem 25
ip subnet-zero
!
!
!
!
interface FastEthernet0
 ip address 192.168.x.x 255.255.255.0
 ip nat inside
 speed auto
 full-duplex
!
interface Serial0
 no ip address
 ip nat outside
 encapsulation frame-relay IETF
 service-module t1 timeslots 1-24
 frame-relay lmi-type ansi
!
interface Serial0.540 point-to-point
 ip address 68.72.x.x 255.255.255.x
 ip nat outside
 frame-relay interface-dlci 540
!
ip nat pool net-1 68.78.x.x 68.78.x.x netmask 255.255.255.x
ip nat inside source list 1 pool net-1 overload
ip nat inside source static 192.168.x.x 68.78.x.x
ip classless
ip route 0.0.0.0 0.0.0.0 68.72.x.x
no ip http server
!
access-list 1 permit 192.168.x.x 0.0.0.255
access-list 104 permit tcp any any eq telnet
!
line con 0
line aux 0
line vty 0 4
 password xxxxxx
 login
!
no scheduler allocate
end

router#



Thanks In Advance

Nathan
LVL 1
nlockwoodAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

td_milesCommented:
What size real IP address range do you have allocated to you ?
0
Asta CuTechnical consultant & graphic designCommented:
0
nlockwoodAuthor Commented:
I have a block of 5 ips
0
Determine the Perfect Price for Your IT Services

Do you wonder if your IT business is truly profitable or if you should raise your prices? Learn how to calculate your overhead burden with our free interactive tool and use it to determine the right price for your IT services. Download your free eBook now!

JFrederick29Commented:
What about setting it up like this:

68.72.x.x(Router)192.168.0.1 ------ 192.168.0.2(Firewall)192.168.1.1 ------Network 192.168.1.0/24

Continue to NAT on the router for the inside network beyond the firewall.  You will need to setup the proper routes.

On the firewall:

0.0.0.0 0.0.0.0 192.168.0.1

On the router:

192.168.1.0 255.255.255.0 192.168.0.2
Same default gateway to your ISP.
0
ekahanCommented:
Nathan,

If you are putting in a REAL firewall behind the router it makes the most sense to disable NAT on the router. So you would take one of the 68.68.x.x addresses and assign it to the Ethernet port of the router. You would take another 68.78.x.x address and assign it to the external interface of your firewall. You then would do all your NAT’ing on the firewall.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
nlockwoodAuthor Commented:
Thanks ekahan.  

That's what I would like to do..    how do I go about removing nat on the router? I know how to add the stuff but not remove it....

0
ekahanCommented:
To remove the nat operation you would use these two commands to take NAT of the interfaces.

int fas 0
no ip nat inside

int s 0
no ip nat outside


If you want to remove the other NAT lines you would just type each nat line in with the word NO at the begining.


Eli
0
ekahanCommented:
For clarity:
This is what the commands are if you want to remove all the NAT lines in the configuration you posted.

Once you are in config mode type the following lines.

int fast  0
no ip nat inside
!
int s 0
no ip nat outside

!
no ip nat pool net-1 68.78.x.x 68.78.x.x netmask 255.255.255.x
no ip nat inside source list 1 pool net-1 overload
no ip nat inside source static 192.168.x.x 68.78.x.x

0
nlockwoodAuthor Commented:
oops silly me I got the commands..

Thanks Ekahan
0
ekahanCommented:
Great! Happy I could help. Please remember to accept the answer.

Eli
0
nlockwoodAuthor Commented:
Thanks for the help Eli...  I appericate it
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Routers

From novice to tech pro — start learning today.