"IP NAT OUTSIDE" not working. Can't figure out why.
Posted on 2008-10-21
I have a Cisco 1721 router where I need to translate the destination address for a client connection. The configuration I am using is below:
interface fasthethernet 1
ip address 172.16.195.49 255.255.255.0
ip nat inside
interface serial 0
ip address 10.10.10.4 255.255.255.0
ip nat outside
ip route 10.100.134.201 255.255.255.0 10.10.10.3
ip route 172.16.191.0 255.255.255.0 172.16.195.1
ip nat outside source static 10.100.134.201 192.168.134.201
ip nat outside source static 10.100.134.202 192.168.134.202
ip nat outside source static 10.100.134.203 192.168.134.203
ip nat outside source static 10.100.134.204 192.168.134.204
ip nat outside source static 10.100.134.205 192.168.134.205
ip nat outside source static 10.100.134.206 192.168.134.206
ip nat outside source static 10.100.134.199 192.168.134.199
I have users sourcing from 172.16.191.x that needed to reach 10.100.134.x but were routing 10.100.134.x through another client connection so we were asked if we can NAT there 10.100.134.x addresses to something else the users can route to. I picked the 192.168.134.x range since it's not in use.
The users are sourcing from the inside interface to 192.168.134.199 but can not establish a connection. I have "ip accounting" configured on both interfaces and see no traffic. I also ran "debug ip nat" and had the user try sourcing from 172.16.191.x to 192.168.134.199 and nothing comes up in the debug.
I verified routing, the user can ping the 172.16.195.48 interface and I see traffic passing through the firewall right before it hits the router but I see no translation on the router.
What am I missing???
Thanks for any help.