We've got a chained subnet that is having problems accessing the Internet.\nI have a fair idea of the problem (and the solution), but my knowledge\nof VLSM routing is a bit weak, so I'm just looking for confirmation before\nI make changes.\n\nThe setup is as below.\n\nInternet-\-\-NAT-\-\-\-\-LAN/25-\-\-Router1-\-\-Router2-\-\-LAN/28\nRouter\n\nLAN/25 = 192.168.1.0/25\nLAN/28 = 192.168.1.160/28\nInt i/f of NAT router = 192.168.1.1/25\nRouter1 i/f = 192.168.1.3/25\nRouter2 i/f = 192.168.1.161/28\n\nConnection between the two LANs is not a problem. Similarly, LAN/25 can\naccess the Internet. The only problem is that a user in LAN/28 can not\naccess the Internet.\n\nMy guess is that because the internal interface of the NAT router is\nconfigured with a 25 bit subnet mask, it is not NATing the addresses from\nthe LAN/28. Correct?\n\nIf I change the internal i/f of the NAT router so that it uses a 24 bit\nsubnet mask will this solve the problem? All the other machines should\nstill be able to access it, even though the router now sits in the 24 bit\nsubnet and the workstations and router still sit in the 25 bit subnet. Correct?