How to set up a working NAT table?

[rrgrassi]

Hello everyone!

NOTE: The IP's listed below are not the ones we use.

I have been tasked with changing a client from broadcasting and using public static IP's to private IP's using DHCP on the workstations, with the current web/exchange server also being the DHCP server until new harware is in place. Since the WEB and Exchange are based on the same server, I need to see how to make a routing/NAT table allowing incoming and out going web/e-mail traffic.

The server currently has it's IP as 95.114.193.140 255.255.255.192.

The router IP is 95.114.193.165 255.255.255.192

I want to make the FastE interface be 10.10.1.100 255.255.255.0, The server be 10.10.1.10 255.255.255.0, The DHCP scope to be 10.1.10.150-225, 255.255.255.0

The Serial (T1) needs to be 95.114.193.165 255.255.255.192

Below is the current config of this 2620. It's pretty ugly, but since I am not a Cisco guru I cannot figure it out.

Any help is greatly appreciated....

Current configuration : 1396 bytes
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 'Cisco2620'
!
enable secret 5 xxxxxxxxx/
enable password xxxxxxxxx
!
!
!
!
!
ip subnet-zero
no ip finger
ip domain-name ALTER.NET
ip name-server 198.6.1.5
!
!
!
!
interface FastEthernet0/0
description To Office FastEthernet
ip address 95.114.193.165 255.255.255.192
duplex auto
speed auto
!
interface Serial0/0
description To UUNET (u87878)
bandwidth 1536
no ip address
encapsulation frame-relay IETF
no fair-queue
frame-relay lmi-type ansi
!
interface Serial0/0.1 point-to-point
bandwidth 1536
ip unnumbered FastEthernet0/0
frame-relay interface-dlci 500 IETF
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/0.1
ip http server
!
snmp-server community fd2393950f RO
snmp-server enable traps snmp
!
line con 0
password xxxxxxx
login
transport preferred none
transport input none
line aux 0
password xxxxxxxx
login
modem InOut
transport preferred none
transport input all
transport output pad v120 telnet rlogin udptn
stopbits 1
flowcontrol hardware
line vty 0 4
password xxxxxxxx
login
transport preferred none
!
no scheduler allocate
end

Thanks for any and all help!

RRGrassi

 

[bell1996]

I believe what you want to do is to create a static NAT translation for the server only.

First establish your in and out interfaces:

interface FastEthernet 0/0
ip nat inside
!
interface Serial 0/0.1
ip nat outside

Next create the static NAT (global configuration commands)

ip nat inside source static 95.114.193.140 10.10.1.10

This will create a static NAT. Whenever traffic FROM the server needs to communicate with a device on the internet, it'll get NAT'd to 95.114.193.140. Also, whenever inbound traffic from the internet is destined for the server with an ip address 95.114.193.140, the router will NAT it to 10.10.1.10 (an internal ip address).

hope this helps....

 

[rrgrassi]

Hi bell1996,

Thanks for the great info. I will be doing this sometime this week after business hours. The info you sent will be a great help!

Thanks Again!

RRGrassi