How to configure this with NAT ?

[jaccies]

How is the following to configure with NAT :

10.0.0.xxx ---- ETH0 Cisco2500 ETH1 --- 10.0.40.1 server


The server 10.0.40.1 should be accessable via telnet for
all users with IP 10.0.0.xxx on ETH0, so they
should access it by : telnet 10.0.40.1

But the server should also be accessable by the outside world if I telnet to 170.10.10.1 , so I need to use NAT

How to configure this , below does not work
I can telnet to 170.10.10.1 but not to 10.0.40.1 ?

int ETH0
ip nat outside
int ETH1
ip nat inside

ip nat inside source static 10.0.40.1 170.10.10.1

thanks

 

[ak8899]

I guess 170.10.10.1 is the address of a serial interface (or whatever interface connects to the ISP).
Why do you do NAT between the two private LAN's?
I guess you need something like this:

int Serial0
ip address 170.10.10.1 xxx.xxx.xxx.xxx
ip nat outside
int ETH0
ip address 10.0.0.x xxx.xxx.xxx.xxx
ip nat inside
int ETH1
ip address 10.0.40.1 xxx.xxx.xxx.xxx
ip nat inside

ip nat inside source list 7 interface serial 0 overload
access-list 7 permit 10.0.40.0 0.0.0.255
ip nat inside source static 10.0.40.1 170.10.10.1
-> All connections to 170.10.10.1 will be redirected to 10.0.40.1. Therefore you will not be able to telnet to the router from the public side, only from internal networks (connections to either 10.0.409.1 or 10.0.0.x). Unless you use a public IP address pool.

Here you'll find all info related to NAT:

http://www.cisco.com/warp/public/556/index.shtml

regards,
Alain

 

[ak8899]

ooops, I guess the access list should permit both internal ip ranges:
access-list 7 permit 10.0.40.0 0.0.0.255
access-list 7 permit 10.0.0.0 0.0.0.255


regards,
Alain

 

[jaccies]

Alain,
thanks for your answer, it is not via a serial line,
but via ETH1.
From outside world they come in via a PIX,
and give them telnet access to 170.10.10.1 ( so they can trace the outside world) which
is my server 10.0.40.1 , that's why I need NAT .
But the way I configured it I can only telnet from 10.0.0.x to 170.10.10.1 but not to 10.0.40.1 .
thanks