Solved

Static NAT on Cisco Router

Posted on 2016-09-07
3
40 Views
Last Modified: 2016-09-27
I having an issue routing traffic out of our cisco router out to the global internet. I have nat setup, I can ping to the outside interface from the inside network but traffic doesn't exit the router. Clean router with no access list, we can ping 8.8.8.5 from outside but unable to access webpage. Any clues ?

Cisco config

Router>
Router>en
Router#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
Router(config)#do show run
Building configuration...
!
interface GigabitEthernet0/0
 ip address 8.8.8.4 255.255.255.248
 ip nat outside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
interface GigabitEthernet0/1
 ip address 10.224.0.151 255.255.0.0
 ip nat inside
 ip virtual-reassembly in
 duplex auto
 speed auto
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat inside source static tcp 10.224.0.152 80 8.8.8.5 80 extendable
ip nat inside source static tcp 10.224.0.152 443 8.8.8.5 443 extendable
!
0
Comment
Question by:Iyad Alaqrabawi
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 14

Accepted Solution

by:
SIM50 earned 250 total points (awarded by participants)
ID: 41788491
define your internal network:
access-list 100 permit ip 10.224.0.0 0.0.255.255 any

bind it to outside interface:
ip nat inside source list 100 interface  GigabitEthernet0/0 overload

verify nat:
sh ip nat translations
0
 
LVL 46

Assisted Solution

by:Craig Beck
Craig Beck earned 250 total points (awarded by participants)
ID: 41790565
In addition to what SIM50 said, and assuming you didn't cut it out of the snippet you provided, you don't appear to have a default route pointing out of your Gig0/0 interface.  You won't get anywhere without that.

ip route 0.0.0.0 0.0.0.0 8.8.8.5

Open in new window

0
 
LVL 46

Expert Comment

by:Craig Beck
ID: 41817524
Best answer chosen
0

Featured Post

Secure Your Active Directory - April 20, 2017

Active Directory plays a critical role in your company’s IT infrastructure and keeping it secure in today’s hacker-infested world is a must.
Microsoft published 300+ pages of guidance, but who has the time, money, and resources to implement? Register now to find an easier way.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Use of TCL script on Cisco devices:  - create file and merge it with running configuration to apply configuration changes
For months I had no idea how to 'discover' the IP address of the other end of a link (without asking someone who knows), and it drove me batty. Think about it. You can't use Cisco Discovery Protocol (CDP) because it's not implemented on the ASAs.…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

733 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question