«

I am wanting to configure a one to one NAT configuration on a 2621 router
by using both FastE interfaces.

I have a /28 address block from my ISP. The gateway address is configured
on the ISPs 6509 that I will be connecting to inside their premises. I am
housing my router, switch(Extreme) and equipment inside their building.

Example..

999.230.24.0/28 - ISP block where 999.230.24.1 is their gateway.
Usable IPs on my 2621 will be 999.230.24.2 through 999.230.2.14
I will connect fastE 0/0 to their 6509.

fastE 0/1 will have private IP space (172.16.1.0/2.

What are the commands to setup one for one NAT so that one public IP will
match to one private IP? I will also be configured this as a firewall
router so that I can apply an access-list to the inbound direction of fa0/0
to only permit certain IPs.

Hopefully this makes sense and thanks in advance...

Homer

"HomerSimpson" <> wrote in message
news8olb.201830$%h1.201258@sccrnsc02...
> I am wanting to configure a one to one NAT configuration on a 2621 router
> by using both FastE interfaces.
>
> I have a /28 address block from my ISP. The gateway address is configured
> on the ISPs 6509 that I will be connecting to inside their premises. I am
> housing my router, switch(Extreme) and equipment inside their building.
>
> Example..
>
> 999.230.24.0/28 - ISP block where 999.230.24.1 is their gateway.
> Usable IPs on my 2621 will be 999.230.24.2 through 999.230.2.14
> I will connect fastE 0/0 to their 6509.
>
> fastE 0/1 will have private IP space (172.16.1.0/2.
>
> What are the commands to setup one for one NAT so that one public IP will
> match to one private IP? I will also be configured this as a firewall
> router so that I can apply an access-list to the inbound direction of
fa0/0
> to only permit certain IPs.
>
> Hopefully this makes sense and thanks in advance...
>
> Homer




No takers on this one?

Please... help...


Homer

On Fri, 24 Oct 2003 23:45:25 +0000, HomerSimpson wrote:


>
> No takers on this one?
>

Here's one way.

!
interface Fastethernet 0/0
ip address 999.230.24.2 255.255.255.240
ip nat outside
!
interface Fastethernet 0/1
ip address 172.16.1.1 255.255.255.240
ip nat inside
!
ip nat inside source static network 172.16.1.0 999.230.24.0 255.255.255.240
!

You can have 172.16.1.[3-14] in your internal network.

--
Rgds,
Martin