11.8 C
New York
Tuesday, November 5, 2024

Nat ACL Query? – Community Engineering Stack Change


I’m so confused with fundamentals that I was an knowledgeable in,
so I’ve this topology enter image description here

Please reply to my questions individually,

Query 1) So if I’ve two DNS severs, and ofc two IP tackle(81.1.1.30 & 31) obtainable from the ISP

This config can be suffice for Port forwarding?

Switch3650(config)#ip nat inside supply static 192.168.1.50 80 81.1.1.30 80

Switch3650(config)#ip nat inside supply static 192.168.1.51 80 81.1.1.31 80

Switch3650(config)#int vlan 1

Switch3650(config-if)#ip nat inside

Switch3650(config)#int fa1/2

Switch3650(config-if)#ip nat outdoors

and configuration of my outdoors interface solely has to have one IP tackle configured or two?

Switch3650(config)#int fa1/2

Switch3650(config-if)#ip add 81.1.1.30 255.255.255.254

**or** defining two ip addresses on my interface

Switch3650(config)#int fa1/2

Switch3650(config-if)#ip add 81.1.1.30 255.255.255.255

Switch3650(config-if)#ip add 81.1.1.31 255.255.255.255 secondary

am I attaining the identical outcome right here?
so when will we use secondary ip, once we cannot cowl our obtainable legitimate(public) IPs with subnet masks in a single line?

so what’s going to occur if I solely put one ip tackle on the skin interface? the nat will not translate anymore, as a result of it may well’t discover the skin interface, as a result of it is not listed within the routing desk, proper?

Switch3650(config-if)#ip add 81.1.1.30 255.255.255.255

Query 2)

so for instance I wanna PAT overload the remainder of my community which they aren’t these two servers and they’re shoppers with ip ranges from 192.168.1.1 to 192.168.1.49
how ought to I calculate the wild card masks?

Switch3650(config)#access-list 1 allow 192.168.1????????????

Switch3650(config)#ip nat inside supply record 1  81.1.1.30 80 overload

that is what I put

**0 0** 0 0 0 0 0 1 = 1

**0 0** 1 1 0 0 0 1 = 49

in line with this algorithm

Community Tackle is 0 which is fallacious it must be 1, as a result of it begins from 1,

what am I lacking?

the Netmask must be I assume: 192 equal to wildcard of 63

Please please reply to all my questions, I’m so confused

Thanks

Related Articles

LEAVE A REPLY

Please enter your comment!
Please enter your name here

Latest Articles