Dear Group Study,
I have recently upgraded my Cisco 1605R to work on my cable connection to
IOS 12.1.5T. I am finally able to negotiate an IP address via DHCP, now
comes the tricky part. I wanted to implement NAT overload, "? Translating
to interface's address:
As a convenience for users wishing to translate all inside addresses to the
address assigned to an interface on the router, the NAT code allows one to
simply name the interface when configuring the dynamic translation rule:
ip nat inside source list <number> interface <interface> overload
If there is no address on the interface, or it the interface is not up, no
translation will occur.
Example:
ip nat inside source list 1 interface Serial0 overload "
After adding all the appropriate commands I am still not able to pass
traffic, I get an encapsulation error message when I do a debug all.
Configs to follow.
All possible debugging has been turned on
Cisco1605#
18:22:26: CBAC Pak 2B062CC Saved sockets (192.168.0.35:1868)
(207.46.130.26:80) tcp
18:22:26: S seq 1766696184(0)
18:22:26: IP: NAT enab = 1 trans = 0 flags = 80
18:22:26: CBAC Pak 2B062CC Saved sockets (192.168.0.35:1868)
(207.46.130.26:80) tcp
18:22:26: S seq 1766696184(0)
18:22:26: NAT: i: tcp (192.168.0.35, 1868) -> (207.46.130.26, 80) [12299]
18:22:26: NAT: Allocated Port for 192.168.0.35 -> 204.210.242.88: wanted
1868 got 1868
18:22:26: NAT: s=192.168.0.35->204.210.242.88, d=207.46.130.26 [12299]
18:22:26: IP: s=204.210.242.88 (Ethernet1), d=207.46.130.26 (Ethernet0),
g=207.46.130.26, len 48, forward
18:22:26: IP ARP: creating incomplete entry for IP address: 207.46.130.26
interface Ethernet0
18:22:26: IP ARP: sent req src 204.210.242.88 0010.7bdf.337c,
dst 207.46.130.26 0000.0000.0000 Ethernet0
18:22:26: IP: s=204.210.242.88 (Ethernet1), d=207.46.130.26 (Ethernet0), len
48, encapsulation failed
18:22:29: CBAC Pak 2B0682C Saved sockets (192.168.0.35:1868)
(207.46.130.26:80) tcp
18:22:29: S seq 1766696184(0)
18:22:29: IP: NAT enab = 1 trans = 0 flags = 80
18:22:29: CBAC Pak 2B0682C Saved sockets (192.168.0.35:1868)
(207.46.130.26:80) tcp
18:22:29: S seq 1766696184(0)
18:22:29: NAT: i: tcp (192.168.0.35, 1868) -> (207.46.130.26, 80) [12313]
18:22:29: NAT: s=192.168.0.35->204.210.242.88, d=207.46.130.26 [12313]
18:22:29: IP: s=204.210.242.88 (Ethernet1), d=207.46.130.26 (Ethernet0),
g=207.46.130.26, len 48, forward
18:22:29: IP ARP: sent req src 204.210.242.88 0010.7bdf.337c,
dst 207.46.130.26 0000.0000.0000 Ethernet0
18:22:29: IP: s=204.210.242.88 (Ethernet1), d=207.46.130.26 (Ethernet0), len
48, encapsulation failed
18:22:35: CBAC Pak 2B0703C Saved sockets (192.168.0.35:1868)
(207.46.130.26:80) tcp
18:22:35: S seq 1766696184(0)
18:22:35: IP: NAT enab = 1 trans = 0 flags = 80
18:22:35: CBAC Pak 2B0703C Saved sockets (192.168.0.35:1868)
(207.46.130.26:80) tcp
18:22:35: S seq 1766696184(0)
18:22:35: NAT: i: tcp (192.168.0.35, 1868) -> (207.46.130.26, 80) [12341]
18:22:35: NAT: s=192.168.0.35->204.210.242.88, d=207.46.130.26 [12341]
18:22:36: IP: s=204.210.242.88 (Ethernet1), d=207.46.130.26 (Ethernet0),
g=207.46.130.26, len 48, forward
18:22:36: IP ARP: sent req src 204.210.242.88 0010.7bdf.337c,
dst 207.46.130.26 0000.0000.0000 Ethernet0
18:22:36: IP: s=204.210.242.88 (Ethernet1), d=207.46.130.26 (Ethernet0), len
48, encapsulation failed
18:22:37: IP ARP: rcvd req src 204.210.242.1 0800.3e0e.8270, dst
204.210.242.252 Ethernet0
18:22:38: CBAC Pak 2B0784C Saved sockets (192.168.0.35:1869)
(216.33.111.110:80) tcp
18:22:38: S seq 1769659304(0)
18:22:38: IP: NAT enab = 1 trans = 0 flags = 80
18:22:38: CBAC Pak 2B0784C Saved sockets (192.168.0.35:1869)
(216.33.111.110:80) tcp
18:22:38: S seq 1769659304(0)
18:22:38: NAT: i: tcp (192.168.0.35, 1869) -> (216.33.111.110, 80) [12350]
18:22:38: NAT: Allocated Port for 192.168.0.35 -> 204.210.242.88: wanted
1869 got 1869
18:22:38: NAT: s=192.168.0.35->204.210.242.88, d=216.33.111.110 [12350]
18:22:38: IP: s=204.210.242.88 (Ethernet1), d=216.33.111.110 (Ethernet0),
g=216.33.111.110, len 48, forward
18:22:38: IP ARP: creating incomplete entry for IP address: 216.33.111.110
interface Ethernet0
18:22:38: IP ARP: sent req src 204.210.242.88 0010.7bdf.337c,
dst 216.33.111.110 0000.0000.0000 Ethernet0
18:22:38: IP: s=204.210.242.88 (Ethernet1), d=216.33.111.110 (Ethernet0),
len 48, encapsulation failedno
18:22:40: RIP-TIMER: periodic timer expired
18:22:40: RIP: sending v2 update to 224.0.0.9 via Ethernet1 (192.168.75.1)
18:22:40: RIP: build update entries - suppressing null update
18:22:40: RIP: sending v2 update to 224.0.0.9 via Ethernet1 (192.168.0.254)
18:22:40: RIP: build update entries - suppressing null update
18:22:41: CBAC Pak 2B0805C Saved sockets (192.168.0.35:1869)
(216.33.111.110:80) tcp
18:22:41: S seq 1769659304(0)
18:22:41: IP: NAT enab = 1 trans = 0 flags = 80
18:22:41: CBAC Pak 2B0805C Saved sockets (192.168.0.35:1869)
(216.33.111.110:80) tcp
18:22:41: S seq 1769659304(0)
18:22:41: NAT: i: tcp (192.168.0.35, 1869) -> (216.33.111.110, 80) [12362]
18:22:41: NAT: s=192.168.0.35->204.210.242.88, d=216.33.111.110 [12362]
18:22:41: IP: s=204.210.242.88 (Ethernet1), d=216.33.111.110 (Ethernet0),
g=216.33.111.110, len 48, forward
18:22:41: IP ARP: sent req src 204.210.242.88 0010.7bdf.337c,
dst 216.33.111.110 0000.0000.0000 Ethernet0 deb
18:22:41: IP: s=204.210.242.88 (Ethernet1), d=216.33.111.110 (Ethernet0),
len 48, encapsulation failed
18:22:42: IP ARP: rcvd req src 204.210.242.1 0800.3e0e.8270, dst
204.210.242.252 Ethernet0ug all
All possible debugging has been turned off
version 12.1
no service single-slot-reload-enable
service timestamps debug uptime
service timestamps log uptime
service password-encryption
!
hostname Cisco1605
!
logging buffered 4096 debugging
logging rate-limit console 10 except errors
enable secret ***********
!
ip subnet-zero
no ip finger
no ip domain-lookup
!
!
!
!
!
!
interface Ethernet0
description connected to EthernetLAN
ip address dhcp
ip accounting output-packets
ip nat outside
!
interface Ethernet1
description connected to EthernetWAN
ip address 192.168.0.254 255.255.255.0 secondary
ip address 192.168.75.1 255.255.255.0
ip nat inside
!
interface Serial0
no ip address
shutdown
!
router r
version 2
network 192.168.0.0
network 192.168.75.0
no auto-summary
!
ip nat inside source list 101 interface Ethernet0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 Ethernet0
no ip http server
!
logging trap warnings
logging 192.168.75.2
access-list 11 permit 192.168.75.0 0.0.0.255 log
access-list 11 permit 192.168.0.0 0.0.0.255 log
access-list 11 deny any log
access-list 101 permit ip 192.168.75.0 0.0.0.255 any
no cdp run
snmp-server engineID local ****
snmp-server community ***
snmp-server community ***
snmp-server packetsize 2048
snmp-server contact ****
banner motd ^CCAuthorized Use Only!^C
!
line con 0
exec-timeout 0 0
password *******
login
transport input none
line vty 0 4
access-class 11 in
exec-timeout 5 0
password *******
login
!
end
Any help on why my encapsulation continues to fail would be appreciated. I
have checked Cisco's site and the archives but there aren't any sample NAT
configs for a DHCP assigned address.
Ken Claussen MCSE CCNA CCA
"The opinions and views expressed here are those of a disolusioned
technoweenie geek and should not be taken literally. Please step away from
the computer!"
_________________________________
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]