Re: [c-nsp] Multiple NAT Rerouting Web Traffic

Hi Jan, Not. I already tried set interface Dialer3 instead of the next-hop. :/ Thanks, Ray On 8. Sep 2010, at 14:47 Uhr, Jan Gregor wrote: Hi, glad that first part worked. I would suggest change the PBR route-map to set interface Dialer3. Maybe that helps, maybe not :). Best regards,

Re: [c-nsp] Multiple NAT Rerouting Web Traffic

That example is matching on IP address (rather than protocol), but I see some differences in what I've been doing. Will try it as soon as I get a chance. Thanks, Ray On 7. Sep 2010, at 22:18 Uhr, Roger Wiklund wrote: Check this link out, http://forums.whirlpool.net.au/archive/1498451

Re: [c-nsp] Multiple NAT Rerouting Web Traffic

Hi, glad that first part worked. I would suggest change the PBR route-map to set interface Dialer3. Maybe that helps, maybe not :). Best regards, Jan On 09/07/2010 06:57 PM, Ray Davis wrote: Thanks for the help! I tried my previous test config again except with this difference... ip

Re: [c-nsp] Multiple NAT Rerouting Web Traffic

Thanks for your test config! The main thing I see different here is that you have two default routes. In my case, the default needs to be the sdsl interface and only http/https should go out the vdsl interface. I get the routing to work, but NAT doesn't work going out the vdsl interface.

Re: [c-nsp] Multiple NAT Rerouting Web Traffic

Thanks for the help! I tried my previous test config again except with this difference... ip access-list extended NAT_Exempt deny tcp any any eq www deny tcp any any eq 443 deny ip 192.168.8.0 0.0.0.255 192.168.6.0 0.0.0.255 deny ip 192.168.8.0 0.0.0.255 192.168.7.0

Re: [c-nsp] Multiple NAT Rerouting Web Traffic

Check this link out, http://forums.whirlpool.net.au/archive/1498451 On Tue, Sep 7, 2010 at 6:57 PM, Ray Davis ray-li...@carpe.net wrote: Thanks for the help! I tried my previous test config again except with this difference...    ip access-list extended NAT_Exempt    deny tcp any any eq

Re: [c-nsp] Multiple NAT Rerouting Web Traffic

Hi, access-list 110 remark * ACL route-map RerouteWebTraffic * access-list 110 permit tcp any any eq www access-list 110 permit tcp any any eq 443 route-map sdsl permit 10 match ip address NAT_Exempt ip access-list extended NAT_Exempt deny ip 192.168.8.0 0.0.0.255 192.168.6.0

Re: [c-nsp] Multiple NAT Rerouting Web Traffic

Here is the NAT order of operations in a Cisco router: http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml#topic1 I just put something together in the lab, not sure if this is what you want to accomplish, but it works like this: interface FastEthernet0/0

Re: [c-nsp] Multiple NAT Rerouting Web Traffic

Here is the NAT order of operations in a Cisco router: http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080133ddd.shtml#topic1 I just put something together in the lab, not sure if this is what you want to accomplish, but it works like this: interface FastEthernet0/0

Re: [c-nsp] Multiple NAT Rerouting Web Traffic

Which means that SNMP will never be NAT:ed on Fa0/1. Typo :) Should of course be ICMP. On Tue, Aug 31, 2010 at 4:01 PM, Roger Wiklund co...@xy.org wrote: Here is the NAT order of operations in a Cisco router:

[c-nsp] Multiple NAT Rerouting Web Traffic

Hi y'all, Got a customer router (2801, IOS 12.4(15)T10) with two upstream interfaces. Both need to do NAT (private IPs inside). One is the default route, the other should be used for web traffic. After trying various configs, I got rerouting web traffic out the 2nd interface working, but