Need NAT PAT on Cisco 2620

[doior]

What is a good way to setup NAT and PAT in the configuration that would allow 1 to 1 static NAT for 2 servers and allow PAT (dynamic) so that 50 clients on the inside would have internet access? I have 14 public IPs to work with in this case. Currently it is just a flat config. (Bad I know)

I appreciate any help that someone could give this LAN guy to get this going.

 

[danandita]

I think it wasn't a good idea to put NAT inside u r router because it chews up a lot router's CPU proccess, I suggest u to use simple iptables rules on another linux box which act as NAT server for those 50 clients. regards,

Darmawan W. Anandita
---
ISP Network/System Administrator

http://people.mweb.co.id/~anand

 

[scraig84]

Danandita - I always find it interesting when people start throwing their personal opinions around based on no amount of detail in the question. Saying that NAT "chews up a lot router's CPU process" just plain isn't true in many cases. This depends on the router used as well as the amount of traffic involved, and other services being performed on the router. Also, do you have any statistical proof that performance is enhanced by forcing packets to travel through 2 boxes (1 Linux with NAT, followed by the router) rather than 1 (just the router with NAT)? If so, I would be interested to see the details regarding the equipment used as well as the amount and type of traffic used.

Doior - Are you looking for the actual config? Or do you know how to configure NAT and you just need some suggestions?

 

[wybnormal]

It's easily done with NAT(includes PAT). The simplest way would be to use 3 of the 14 IPs.. one for the global overloading so the 50 clients can share it while being behind the NAT connection and then you can map 2 real IPs to 2 NATed IPs.

Configuring Static and Dynamic NAT Simultaneously

http://www.cisco.com/warp/public/556/9.html

As far as the processing goes, it's much more dependent on how many clients, how many translations and which router is being used. I've run more then 100 NATed clients on a 2500 without issue. You also need to consider what else is happening on the router. Routing protocols, multiple protocols and so on can hit the router every bit as hard or even worse.

MikeS
Find me at

http://www.packetattack.com

"The trouble with giving up civil rights is that you never get them back"

 

[doior]

A copy of the config would be beneficial or a list of the commands in sequence would be great. I really do want to do the nat on the router.

I appreciate evryone's feedback on this.