Solved

NAT Overload

Posted on 2012-03-22
1
653 Views
Last Modified: 2012-03-26
Question-
I have one router, two ISPs with BGP(Gi0/0 and Gi6/0).  I have one NAT Overload pointing to one WAN interface.  
--------------------------------
ip nat inside source route-map no-vpn-nat interface GigabitEthernet0/0 overload

route-map no-vpn-nat permit 10
 match ip address 180

access-list 180 deny   ip 10.100.0.0 0.0.255.255 10.0.0.0 0.255.255.255
access-list 180 deny   ip 10.100.0.0 0.0.255.255 172.16.0.0 0.15.255.255
access-list 180 deny   ip 10.100.0.0 0.0.255.255 192.168.0.0 0.0.255.255
access-list 180 permit ip 10.100.0.0 0.0.255.255 any
--------------------------------
Can I add another WAN interface?  

was thinking I could add this..

ip nat inside source route-map no-vpn-nat interface GigabitEthernet6/0 overload
but the IOS wont allow that.

Thanks
0
Comment
Question by:800LM
1 Comment
 
LVL 5

Accepted Solution

by:
atechnicnate earned 500 total points
ID: 37755969
I've never personally done this so your question got me intrigued.  I found a doc that looks like using route-maps is really your best bet.  Just change the config to an overload setup...

(Credit where it's due) Reference:
https://supportforums.cisco.com/docs/DOC-3987

interface Ethernet0
 ip address 10.1.1.1 255.0.0.0
 ip nat inside
!--This connects to the Corporate network, designated as the NAT inside interface.  
interface Serial0
 ip address 192.168.1.1 255.255.255.252
 ip nat outside
!---This connects to the Internet through ISP-1, designated as the NAT outside interface.  
 
interface Serial1
 ip address 172.16.1.1 255.255.255.252
 ip nat outside
!---This connects to the Internet through ISP-2, designated as the NAT outside interface.  

ip nat pool ISP-1 192.168.1.3 192.168.1.254 prefix-length 24
!---This creates a pool by the name ISP-1, which contains addresses assigned by ISP-1.  

ip nat pool ISP-2 172.16.1.3 172.16.1.254 prefix-length 24
!---This creates a pool by the name ISP-2, which contains addresses assigned by ISP-2.  

ip nat inside source route-map isp-1 pool ISP-1
!---The above line configures Dynamic NAT mapping for the inside network
10.0.0.0/8 to a global address from the pool ISP-1 to be used for traffic matched by the route-map isp-1.  

ip nat inside source route-map isp-2 pool ISP-2
!---The above line configures Dynamic NAT mapping for the inside network
10.0.0.0/8 to a global address from the pool ISP-2 to be used for traffic matched by the route-map isp-2.  

access-list 1 permit 10.0.0.0 0.255.255.255
!---This ACL permits traffic from all hosts in the Corporate network.  

route-map isp-2 permit 10
 match ip address 1
 match interface Serial1
!---This route-map matches all traffic matched by ACL 1 and going out of
interface serial 1. In other words, all traffic from the Corporate network to the Internet through ISP-2 is matched.  

route-map isp-1 permit 10
 match ip address 1
 match interface Serial0
!---This route-map matches all traffic matched by ACL 1 and going out of
interface serial 0. In other words, all traffic from the Corporate network to the Internet through ISP-1 is matched.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Suggested Solutions

New Server 172.16.200.2  was moved from behind Router R2 f0/1 to behind router R1 int f/01 and has now address 172.16.100.2. But we want users still to be able to connected to it by old IP. How to do it ? We can used destination NAT (DNAT).  In DNAT…
Problem Description:   Couple of months ago we upgraded the ADSL line at our branch office from Home to Business line. The purpose of transforming the service to have static public IP’s. We were in need for public IP’s to publish our web resour…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

747 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now