As long as you have the following on C1720: Int s0 Ip address 192.168.254.2 255.255.255.252
and Ip route 0.0.0.0 0.0.0.0 192.168.254.1 And the following on the c2620: Int s1/1 Ip addr 192.168.254.1 255.255.255.252 And Ip route 10.10.11.0 255.255.255.0 192.168.254.2 ... then no, you shouldn't have to apply the "ip nat inside" to the s1/1 interface. HTHs Mark -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of TMS Sent: Wednesday, May 29, 2002 3:47 AM To: [EMAIL PROTECTED] Subject: "ip nat inside" question [7:45339] I have configuration which looks like that: ISP --> S1/0 S1/1 --------------> S0 C2620 C1720 Fa0/0 --> LAN Fa0 --> LAN 2 10.10.10.0/24 10.10.11.0/24 I configured NAT on C2620 to: interface Serial1/0 ip nat outside ! inteface Fa0/0 ip address 10.10.10.1 255.255.255.0 ip nat inside ! ip route 0.0.0.0 0.0.0.0 Serial1/0 ip nat inside source list 1 interface Serial1/0 overload access-list 1 permit 10.10.10.0 0.0.0.255 access-list 1 permit 10.10.11.0 0.0.0.255 Now C1720 is connected to C2620 and computers connected behind C1720's Fa0 have access to internet via C2620 is necessary to set 'ip nat inside' on interface Serial1/1 on C2620 ? -- TMS Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=45345&t=45339 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]