RE: NAT configuration for 2 service providers [7:43820]

2002-05-13 Thread brahmam lv

Thanks 


Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=44023t=43820
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



NAT configuration for 2 service providers [7:43820]

2002-05-10 Thread brahmam lv

Hi Friends,

I have 2 Internet links working at present. One link terminated on Cisco
router and another link terminated on Telindus Crocus router ( which doesnt
have NAT functionality) To facilitate internet access i have configured NAT
on Cisco with overload, for second i have installed Windows 2000 NAT and
configured all clients with gateway as NAT.

If i want to shift the second internet link to cisco device with 2 serial
ports, how do i create second NAT entry for 2nd provider.

Could you please help me.

Thanks in Advance

Brahmam.
415-339-0352 ex-0355



Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=43820t=43820
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: NAT configuration for 2 service providers [7:43820]

2002-05-10 Thread Kent Hundley

You can find lots of good info on Cisco NAT by surfing to cisco.com and
searching for NAT tips.  Here's a shortcut:


http://www.cisco.com/warp/public/556/index.shtml

And here's an example to help with your specific question:

http://www.cisco.com/warp/public/105/nat_routemap.html

This whitepaper might help also:

http://www.cisco.com/warp/public/cc/pd/iosw/ioft/ionetn/tech/emios_wp.htm


HTH,
Kent

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Friday, May 10, 2002 4:57 AM
To: [EMAIL PROTECTED]
Subject: NAT configuration for 2 service providers [7:43820]


Hi Friends,

I have 2 Internet links working at present. One link terminated on Cisco
router and another link terminated on Telindus Crocus router ( which doesnt
have NAT functionality) To facilitate internet access i have configured NAT
on Cisco with overload, for second i have installed Windows 2000 NAT and
configured all clients with gateway as NAT.

If i want to shift the second internet link to cisco device with 2 serial
ports, how do i create second NAT entry for 2nd provider.

Could you please help me.

Thanks in Advance

Brahmam.
415-339-0352 ex-0355




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=43825t=43820
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Re: NAT configuration for 2 service providers [7:43820]

2002-05-10 Thread John Huston

Overload it by port so you are doing PAT instead of NAT.  Is NAT a
requirement?
If so then create a second pool however it cannot be the same ip addresses as
the first pool.  Perhaps you could layout your objective with a little more
detail.

brahmam lv  wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
 Hi Friends,

 I have 2 Internet links working at present. One link terminated on Cisco
 router and another link terminated on Telindus Crocus router ( which doesnt
 have NAT functionality) To facilitate internet access i have configured NAT
 on Cisco with overload, for second i have installed Windows 2000 NAT and
 configured all clients with gateway as NAT.

 If i want to shift the second internet link to cisco device with 2 serial
 ports, how do i create second NAT entry for 2nd provider.

 Could you please help me.

 Thanks in Advance

 Brahmam.
 415-339-0352 ex-0355




Message Posted at:
http://www.groupstudy.com/form/read.php?f=7i=43826t=43820
--
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



Help needed with IPSec and NAT Configuration

2000-08-11 Thread George Zhang

Hi Group,

I gave a question regarding IPSec and NAT configuration.  I am trying to
configure IPSec between a 3640 and 1605.  The diagram of the network is
shown below:


--
--
||
150.26.154.249/30||
  ---fa0/0--|||3640
|||--S0/0---S0--|||1605   |||--E0---
 192.168.64.1/24 | |
150.26.154.250/30 ||  192.168.128.1/24
--   IPSec
channel--

IPSec needs to be configured between the 3640: S0/0 interface and 1605:
S0 interface.
Both 3640:S0/0 and 1605:S0 are using global IP address.  Both 3640:fa0/0
and 1605:E0 are using private IP address.  NAT is configured on both
3640 and 1606 to translate between the private and global IP addresses.

According to Cisco CCO, "If you use network address translation (NAT),
you should configure static NAT translations so that IPSec will work
properly.  In general, NAT translation should occur before the router
performs IPSec encapsulation;in other word, IPSec should be working with
global address".

My questions are that,

(1) What does it mean by "NAT translation should occur before the router
performs IPSec encapsulation;in other word, IPSec should be working with
global address"?  Does that mean I need one more router at both end to
do the NAT?

(2) Can I do IPSec with the diagram show above?  If I can, how should I
configure the access-list?  Should I be using the global or private IP
address in the acess-list, i.e. which one of the next two is correct,

A.  access-list 120 permit ip 192.168.64.0 0.0.0.255 192.168.128.0
0.0.0.255
B.  access-list 120 permit ip 150.26.154.249 0.0.0.0 150.26.154.250
0.0.0.0


I know quite a few people out there are CCNP-Security certified.  Please
help me out.  Thank you very much for your help in advance.

George Zhang, CCNP

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



NAT Configuration

2000-06-14 Thread Charles Nunie

Hi,

How would you configure network address translation (NAT) on a cisco router,
and what series is recommended

Dzilo


Get free email and a permanent address at http://www.netaddress.com/?N=1

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]



RE: NAT Configuration

2000-06-14 Thread Daniel Cotts

All you need is here:
http://www.cisco.com/warp/public/556/index.shtml

The series of router that you need for a particular situation is one that
meets the immediate needs of the user company. If network growth is
anticipated within the next year then buy a router that will meet that
future need (if possible). IMHO Long term growth is best served by the new
boxes that will be developed between the present and that future need.

 -Original Message-
 From: Charles Nunie [mailto:[EMAIL PROTECTED]]
 Sent: Tuesday, June 13, 2000 7:35 AM
 To: [EMAIL PROTECTED]
 Subject: NAT Configuration
 
 
 Hi,
 
 How would you configure network address translation (NAT) on 
 a cisco router,
 and what series is recommended
 
 Dzilo
 
 
 Get free email and a permanent address at 
 http://www.netaddress.com/?N=1
 
 
 ___
 UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
 FAQ, list archives, and subscription info: http://www.groupstudy.com
 Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
 

___
UPDATED Posting Guidelines: http://www.groupstudy.com/list/guide.html
FAQ, list archives, and subscription info: http://www.groupstudy.com
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]