Solved

What does ip nat inside source list 111 interface Dialer0 overload actually do

Posted on 2012-03-28
5
772 Views
Last Modified: 2012-03-28
Hi
Can anyone fill me in on exactly what this ip nat statement actually does on my cisco 1721?

ip nat inside source list 111 interface Dialer0 overload

access-list 111 deny   ip any 192.0.0.0 0.255.255.255
access-list 111 permit ip 192.168.18.0 0.0.0.255 any
access-list 111 permit ip 10.18.2.0 0.0.0.255 any
access-list 111 permit ip 10.18.1.0 0.0.0.255 any

TIA
Jo
0
Comment
Question by:jrb139
  • 3
  • 2
5 Comments
 
LVL 15

Expert Comment

by:Nayyar HH (CCIE RS)
ID: 37775569
In basic terms, It will translate all your source addresses matched by the criteria in access-list 111 to the address of the dialer interface
0
 

Author Comment

by:jrb139
ID: 37775587
Does that mean
access-list 111 deny   ip any 192.0.0.0 0.255.255.255
will not get translated and thus its source address in the packet will remain as it was when originally sent from the device?

And the overload command, any particular meaning?
0
 
LVL 15

Accepted Solution

by:
Nayyar HH (CCIE RS) earned 500 total points
ID: 37775617
yes that's right condition matching "access-list 111 deny   ip any 192.0.0.0 0.255.255.255" will not get translated and will be routed

The overload statement enables the router to use the ONE IP address on the dialer interface for MANY inside addresses
0
 

Author Closing Comment

by:jrb139
ID: 37775975
Perfect
No longer do I have to sit and stare thinking 'What' but can move on to other lines of code to think 'What' about.
Thank you
Jo
0
 
LVL 15

Expert Comment

by:Nayyar HH (CCIE RS)
ID: 37776296
Pleasure :-)
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Quality of Service (QoS) options are nearly endless when it comes to networks today. This article is merely one example of how it can be handled in a hub-n-spoke design using a 3-tier configuration.
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question