Options

IP Source NAT

mcptmcpt Member ✭
in System
Hello,
I have two AX2500 (active/active).
Servers (172.10.10.0/24) need to access other servers (192.168.1.0/24) and Internet, using NAT...
The "IP Source NAT" works only for icmp. Why?

vlan 1 --- AX --- vlan 2 --- Internet
vlan 1: 172.10.10.0/24 (Servers)
vlan 2: 192.168.1.0/24 (VIP)

access-list 110 permit ip 172.10.10.0 0.0.0.255 any
ip nat outside (vlan 2)
ip nat inside (vlan 1)
ip nat pool snat 192.168.1.250 192.168.1.250 netmask /24
ip nat inside source list 110 pool snat

Thanks!

Comments

  • Options
    UnknownUnknown
    edited February 2014
    Hello as shown in the example below in the case of IP NAT it needs to be applied to a VE (Virtual ethernet)

    vlan 100
    untagged ethernet 7
    router-interface ve 100
    !
    interface ve 100
    ip address 172.16.20.100 255.255.255.0
    ip nat inside
Sign In or Register to comment.