ciao a tutti, ho un problema nell'impostare il nat dinamico su un router sul quale sono presenti delle sottointerfacce per alcune vlan... come mi comporto? ho provato a applicare le stesse regole delle interfacce, ma non funziona... mi sfugge qualcosa? grazie ciao
ps. questa è la configurazione del router:
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
!
interface FastEthernet0/0
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.2
description vlan 4 amministrazione
encapsulation dot1Q 4
ip address 172.17.145.129 255.255.255.192
ip access-group A in
ip access-group Aa out
ip nat inside
!
interface FastEthernet0/0.3
description vlan 2 produzione
encapsulation dot1Q 2
ip address 172.17.144.1 255.255.255.0
ip access-group P in
ip nat inside
!
interface FastEthernet0/0.4
description vlan 3 marketing
encapsulation dot1Q 3
ip address 172.17.145.1 255.255.255.128
ip access-group M in
ip nat inside
!
interface FastEthernet0/0.5
description vlan 6 formazione
encapsulation dot1Q 6
ip address 172.17.146.1 255.255.255.192
ip access-group formN out
!
interface FastEthernet0/0.6
description vlan 5 enterprise
encapsulation dot1Q 5
ip address 172.17.145.193 255.255.255.192
!
interface FastEthernet0/0.7
description vlan 7 mail
encapsulation dot1Q 7
ip address 172.17.146.65 255.255.255.248
ip access-group mail out
ip nat inside
!
interface FastEthernet0/1
ip address 131.114.28.3 255.255.255.248
ip access-group out out
ip nat outside
duplex auto
speed auto
!
interface Vlan1
no ip address
shutdown
!
router eigrp 1
network 131.114.28.0 0.0.0.7
auto-summary
!
router rip
!
ip nat pool tradotto 131.114.28.3 131.114.28.3 netmask 255.255.255.248
ip nat inside source list out pool tradotto overload
ip nat inside source static tcp 172.17.146.66 25 131.114.28.3 25
ip nat inside source static tcp 172.17.146.67 110 131.114.28.3 110
ip classless
ip route 172.17.176.0 255.255.255.0 131.114.28.1
!
!
ip access-list extended M
permit udp any any eq bootps
permit tcp 172.17.145.0 0.0.0.127 any eq www
permit tcp any any established
permit tcp 172.17.145.0 0.0.0.127 131.114.28.0 0.0.0.7 eq domain
permit tcp 172.17.145.0 0.0.0.127 172.17.146.64 0.0.0.7 eq smtp
permit tcp 172.17.145.0 0.0.0.127 172.17.146.64 0.0.0.7 eq pop3
ip access-list extended P
permit udp any any eq bootps
permit tcp 172.17.144.0 0.0.0.255 any eq www
permit tcp any any established
permit tcp 172.17.144.0 0.0.0.255 131.114.28.0 0.0.0.7 eq domain
permit tcp 172.17.144.0 0.0.0.255 172.17.146.64 0.0.0.7 eq smtp
permit tcp 172.17.144.0 0.0.0.255 172.17.146.64 0.0.0.7 eq pop3
ip access-list extended A
permit udp any any eq bootps
permit tcp 172.17.145.128 0.0.0.63 172.17.145.0 0.0.0.127
permit tcp 172.17.145.128 0.0.0.63 172.17.144.0 0.0.0.255
permit tcp 172.17.145.128 0.0.0.63 131.114.28.0 0.0.0.7 eq www
permit tcp 172.17.145.128 0.0.0.63 172.17.146.64 0.0.0.7 eq smtp
permit tcp 172.17.145.128 0.0.0.63 172.17.146.64 0.0.0.7 eq pop3
ip access-list extended Aa
permit tcp any any established
ip access-list extended mail
permit tcp any 172.17.146.64 0.0.0.7 eq smtp
permit tcp any 172.17.146.64 0.0.0.7 eq pop3
ip access-list extended formN
permit ip 172.17.176.64 0.0.0.63 172.17.146.0 0.0.0.63
ip access-list extended out
permit ip any any
!
ip dhcp excluded-address 172.17.144.1 172.17.144.10
ip dhcp excluded-address 172.17.145.1 172.17.145.10
ip dhcp excluded-address 172.17.146.1 172.17.146.3
ip dhcp excluded-address 172.17.145.129 172.17.145.138
!
ip dhcp pool produzioneN
network 172.17.144.0 255.255.255.0
default-router 172.17.144.1
dns-server 131.114.28.6
ip dhcp pool amministrazioneN
network 172.17.145.128 255.255.255.192
default-router 172.17.145.129
dns-server 131.114.28.6
ip dhcp pool marketingN
network 172.17.145.0 255.255.255.128
default-router 172.17.145.1
dns-server 131.114.28.6
ip dhcp pool formazioneN
network 172.17.146.0 255.255.255.192
default-router 172.17.146.1
dns-server 131.114.28.6
!
!
!
!
!
line con 0
line vty 0 4
login
!
!
!
end
vlan e nat dinamico
Moderatore: Federico.Lagni