PAT not translating at all
up vote
2
down vote
favorite
I am studying for my CCENT.
I threw together a PAT practice lab.
Other than DHCP and RIP everything is pretty stock.
No VLANs
No security
Just NAT overload on ACCESS router.
I am stumped why it isn't translating
It will still ping all around.
show ip nat statistics, miss count is going up.
Debugging for NAT is on but silent.
It all looks like it should be working.
Is there something wrong with my configuration?
ACCESS#sho ip nat translations
ACCESS#sho ip nat stat
Total translations: 0 (0 static, 0 dynamic, 0 extended)
Outside Interfaces: GigabitEthernet0/1
Inside Interfaces: GigabitEthernet0/0
Hits: 0 Misses: 163
Expired translations: 0
Dynamic mappings:
ACCESS#show run
Building configuration...
Current configuration : 981 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname ACCESS
!
ip cef
no ipv6 cef
!
license udi pid CISCO2911/K9 sn FTX1524DSR5-
!
spanning-tree mode pvst
!
interface GigabitEthernet0/0
ip address 10.0.0.1 255.255.255.0
ip helper-address 8.8.8.2
ip nat inside
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 8.8.8.1 255.255.255.252
ip nat outside
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
passive-interface GigabitEthernet0/0
network 8.0.0.0
network 10.0.0.0
!
ip nat inside source list 1 interface GigabitEthernet0/1 overload
ip classless
!
ip flow-export version 9
!
access-list 1 permit host 10.0.0.0
!
no cdp run
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
end
routing nat cisco-ios troubleshooting
edited yesterday
jonathanjo
9,5211631
asked yesterday
Reckless Liberty
132
New contributor
Reckless Liberty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
up vote
2
down vote
favorite
I am studying for my CCENT.
I threw together a PAT practice lab.
Other than DHCP and RIP everything is pretty stock.
No VLANs
No security
Just NAT overload on ACCESS router.
I am stumped why it isn't translating
It will still ping all around.
show ip nat statistics, miss count is going up.
Debugging for NAT is on but silent.
It all looks like it should be working.
Is there something wrong with my configuration?
ACCESS#sho ip nat translations
ACCESS#sho ip nat stat
Total translations: 0 (0 static, 0 dynamic, 0 extended)
Outside Interfaces: GigabitEthernet0/1
Inside Interfaces: GigabitEthernet0/0
Hits: 0 Misses: 163
Expired translations: 0
Dynamic mappings:
ACCESS#show run
Building configuration...
Current configuration : 981 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname ACCESS
!
ip cef
no ipv6 cef
!
license udi pid CISCO2911/K9 sn FTX1524DSR5-
!
spanning-tree mode pvst
!
interface GigabitEthernet0/0
ip address 10.0.0.1 255.255.255.0
ip helper-address 8.8.8.2
ip nat inside
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 8.8.8.1 255.255.255.252
ip nat outside
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
passive-interface GigabitEthernet0/0
network 8.0.0.0
network 10.0.0.0
!
ip nat inside source list 1 interface GigabitEthernet0/1 overload
ip classless
!
ip flow-export version 9
!
access-list 1 permit host 10.0.0.0
!
no cdp run
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
end
routing nat cisco-ios troubleshooting
edited yesterday
jonathanjo
9,5211631
asked yesterday
Reckless Liberty
132
New contributor
Reckless Liberty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
You really need to give us all the router configurations, and we need to know specifically what doesn't seem to be working. Also, if you are trying to run a routing protocol through NAPT, you must understand that is not going to work.
– Ron Maupin♦
yesterday
add a comment |
up vote
2
down vote
favorite
up vote
2
down vote
favorite
I am studying for my CCENT.
I threw together a PAT practice lab.
Other than DHCP and RIP everything is pretty stock.
No VLANs
No security
Just NAT overload on ACCESS router.
I am stumped why it isn't translating
It will still ping all around.
show ip nat statistics, miss count is going up.
Debugging for NAT is on but silent.
It all looks like it should be working.
Is there something wrong with my configuration?
ACCESS#sho ip nat translations
ACCESS#sho ip nat stat
Total translations: 0 (0 static, 0 dynamic, 0 extended)
Outside Interfaces: GigabitEthernet0/1
Inside Interfaces: GigabitEthernet0/0
Hits: 0 Misses: 163
Expired translations: 0
Dynamic mappings:
ACCESS#show run
Building configuration...
Current configuration : 981 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname ACCESS
!
ip cef
no ipv6 cef
!
license udi pid CISCO2911/K9 sn FTX1524DSR5-
!
spanning-tree mode pvst
!
interface GigabitEthernet0/0
ip address 10.0.0.1 255.255.255.0
ip helper-address 8.8.8.2
ip nat inside
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 8.8.8.1 255.255.255.252
ip nat outside
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
passive-interface GigabitEthernet0/0
network 8.0.0.0
network 10.0.0.0
!
ip nat inside source list 1 interface GigabitEthernet0/1 overload
ip classless
!
ip flow-export version 9
!
access-list 1 permit host 10.0.0.0
!
no cdp run
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
end
routing nat cisco-ios troubleshooting
edited yesterday
jonathanjo
9,5211631
asked yesterday
Reckless Liberty
132
New contributor
Reckless Liberty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
I am studying for my CCENT.
I threw together a PAT practice lab.
Other than DHCP and RIP everything is pretty stock.
No VLANs
No security
Just NAT overload on ACCESS router.
I am stumped why it isn't translating
It will still ping all around.
show ip nat statistics, miss count is going up.
Debugging for NAT is on but silent.
It all looks like it should be working.
Is there something wrong with my configuration?
ACCESS#sho ip nat translations
ACCESS#sho ip nat stat
Total translations: 0 (0 static, 0 dynamic, 0 extended)
Outside Interfaces: GigabitEthernet0/1
Inside Interfaces: GigabitEthernet0/0
Hits: 0 Misses: 163
Expired translations: 0
Dynamic mappings:
ACCESS#show run
Building configuration...
Current configuration : 981 bytes
!
version 15.1
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname ACCESS
!
ip cef
no ipv6 cef
!
license udi pid CISCO2911/K9 sn FTX1524DSR5-
!
spanning-tree mode pvst
!
interface GigabitEthernet0/0
ip address 10.0.0.1 255.255.255.0
ip helper-address 8.8.8.2
ip nat inside
duplex auto
speed auto
!
interface GigabitEthernet0/1
ip address 8.8.8.1 255.255.255.252
ip nat outside
duplex auto
speed auto
!
interface GigabitEthernet0/2
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
passive-interface GigabitEthernet0/0
network 8.0.0.0
network 10.0.0.0
!
ip nat inside source list 1 interface GigabitEthernet0/1 overload
ip classless
!
ip flow-export version 9
!
access-list 1 permit host 10.0.0.0
!
no cdp run
!
line con 0
!
line aux 0
!
line vty 0 4
login
!
end
routing nat cisco-ios troubleshooting
routing nat cisco-ios troubleshooting
edited yesterday
jonathanjo
9,5211631
asked yesterday
Reckless Liberty
132
New contributor
Reckless Liberty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited yesterday
jonathanjo
9,5211631
asked yesterday
Reckless Liberty
132
New contributor
Reckless Liberty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
edited yesterday
jonathanjo
9,5211631
edited yesterday
jonathanjo
9,5211631
edited yesterday
jonathanjo
9,5211631
9,5211631
asked yesterday
Reckless Liberty
132
New contributor
Reckless Liberty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked yesterday
Reckless Liberty
132
asked yesterday
Reckless Liberty
132
132
New contributor
Reckless Liberty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Reckless Liberty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Reckless Liberty is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
You really need to give us all the router configurations, and we need to know specifically what doesn't seem to be working. Also, if you are trying to run a routing protocol through NAPT, you must understand that is not going to work.
– Ron Maupin♦
yesterday
add a comment |
You really need to give us all the router configurations, and we need to know specifically what doesn't seem to be working. Also, if you are trying to run a routing protocol through NAPT, you must understand that is not going to work.
– Ron Maupin♦
yesterday
You really need to give us all the router configurations, and we need to know specifically what doesn't seem to be working. Also, if you are trying to run a routing protocol through NAPT, you must understand that is not going to work.
– Ron Maupin♦
yesterday
You really need to give us all the router configurations, and we need to know specifically what doesn't seem to be working. Also, if you are trying to run a routing protocol through NAPT, you must understand that is not going to work.
– Ron Maupin♦
yesterday
add a comment |
1 Answer
1
active
oldest
votes
up vote
4
down vote
accepted
Looks like the NAT access-list 1 is too tight. host 10.0.0.0 will only match the single host with address 10.0.0.0, and you have no such host.
You almost certainly wanted this:
access-list 1 permit 10.0.0.0 0.0.0.255
which will include your hosts at the bottom of your diagram.
answered yesterday
jonathanjo
9,5211631
The wildcard mask got me. I entered it as a subnet mask. so, was my other traffic going as normal and NAT was just waiting for host 10.0.0.0 to translate?
– Reckless Liberty
yesterday
Also, can you please tell me how you edited my code to be in it's original format? thanks again
– Reckless Liberty
yesterday
Re mask: I believe so. Re formatting: mark some text, click{ }in little edit menu. For inline, use back-ticks. If you edit the question you'll see it.
– jonathanjo
yesterday
I can't edit, I'm too new., what's a backtick?
– Reckless Liberty
yesterday
The back-tick is also sometimes called left-single-quote or grave (which I can't type here) en.wikipedia.org/wiki/Grave_accent#Use_in_programming You don't type the braces, you click on the braces icon, which isn't obvious to me either. Or you can type four spaces at the front of each line (and blank lines above and below) a block to mark it like the configs.
– jonathanjo
yesterday
|
show 1 more comment
1 Answer
1
active
oldest
votes
1 Answer
1
active
oldest
votes
active
oldest
votes
active
oldest
votes
up vote
4
down vote
accepted
Looks like the NAT access-list 1 is too tight. host 10.0.0.0 will only match the single host with address 10.0.0.0, and you have no such host.
You almost certainly wanted this:
access-list 1 permit 10.0.0.0 0.0.0.255
which will include your hosts at the bottom of your diagram.
answered yesterday
jonathanjo
9,5211631
The wildcard mask got me. I entered it as a subnet mask. so, was my other traffic going as normal and NAT was just waiting for host 10.0.0.0 to translate?
– Reckless Liberty
yesterday
Also, can you please tell me how you edited my code to be in it's original format? thanks again
– Reckless Liberty
yesterday
Re mask: I believe so. Re formatting: mark some text, click{ }in little edit menu. For inline, use back-ticks. If you edit the question you'll see it.
– jonathanjo
yesterday
I can't edit, I'm too new., what's a backtick?
– Reckless Liberty
yesterday
The back-tick is also sometimes called left-single-quote or grave (which I can't type here) en.wikipedia.org/wiki/Grave_accent#Use_in_programming You don't type the braces, you click on the braces icon, which isn't obvious to me either. Or you can type four spaces at the front of each line (and blank lines above and below) a block to mark it like the configs.
– jonathanjo
yesterday
|
show 1 more comment
up vote
4
down vote
accepted
Looks like the NAT access-list 1 is too tight. host 10.0.0.0 will only match the single host with address 10.0.0.0, and you have no such host.
You almost certainly wanted this:
access-list 1 permit 10.0.0.0 0.0.0.255
which will include your hosts at the bottom of your diagram.
answered yesterday
jonathanjo
9,5211631
The wildcard mask got me. I entered it as a subnet mask. so, was my other traffic going as normal and NAT was just waiting for host 10.0.0.0 to translate?
– Reckless Liberty
yesterday
Also, can you please tell me how you edited my code to be in it's original format? thanks again
– Reckless Liberty
yesterday
Re mask: I believe so. Re formatting: mark some text, click{ }in little edit menu. For inline, use back-ticks. If you edit the question you'll see it.
– jonathanjo
yesterday
I can't edit, I'm too new., what's a backtick?
– Reckless Liberty
yesterday
The back-tick is also sometimes called left-single-quote or grave (which I can't type here) en.wikipedia.org/wiki/Grave_accent#Use_in_programming You don't type the braces, you click on the braces icon, which isn't obvious to me either. Or you can type four spaces at the front of each line (and blank lines above and below) a block to mark it like the configs.
– jonathanjo
yesterday
|
show 1 more comment
up vote
4
down vote
accepted
up vote
4
down vote
accepted
Looks like the NAT access-list 1 is too tight. host 10.0.0.0 will only match the single host with address 10.0.0.0, and you have no such host.
You almost certainly wanted this:
access-list 1 permit 10.0.0.0 0.0.0.255
which will include your hosts at the bottom of your diagram.
answered yesterday
jonathanjo
9,5211631
Looks like the NAT access-list 1 is too tight. host 10.0.0.0 will only match the single host with address 10.0.0.0, and you have no such host.
You almost certainly wanted this:
access-list 1 permit 10.0.0.0 0.0.0.255
which will include your hosts at the bottom of your diagram.
answered yesterday
jonathanjo
9,5211631
edited yesterday
answered yesterday
jonathanjo
9,5211631
answered yesterday
jonathanjo
9,5211631
answered yesterday
jonathanjo
9,5211631
9,5211631
The wildcard mask got me. I entered it as a subnet mask. so, was my other traffic going as normal and NAT was just waiting for host 10.0.0.0 to translate?
– Reckless Liberty
yesterday
Also, can you please tell me how you edited my code to be in it's original format? thanks again
– Reckless Liberty
yesterday
Re mask: I believe so. Re formatting: mark some text, click{ }in little edit menu. For inline, use back-ticks. If you edit the question you'll see it.
– jonathanjo
yesterday
I can't edit, I'm too new., what's a backtick?
– Reckless Liberty
yesterday
The back-tick is also sometimes called left-single-quote or grave (which I can't type here) en.wikipedia.org/wiki/Grave_accent#Use_in_programming You don't type the braces, you click on the braces icon, which isn't obvious to me either. Or you can type four spaces at the front of each line (and blank lines above and below) a block to mark it like the configs.
– jonathanjo
yesterday
|
show 1 more comment
The wildcard mask got me. I entered it as a subnet mask. so, was my other traffic going as normal and NAT was just waiting for host 10.0.0.0 to translate?
– Reckless Liberty
yesterday
Also, can you please tell me how you edited my code to be in it's original format? thanks again
– Reckless Liberty
yesterday
Re mask: I believe so. Re formatting: mark some text, click{ }in little edit menu. For inline, use back-ticks. If you edit the question you'll see it.
– jonathanjo
yesterday
I can't edit, I'm too new., what's a backtick?
– Reckless Liberty
yesterday
The back-tick is also sometimes called left-single-quote or grave (which I can't type here) en.wikipedia.org/wiki/Grave_accent#Use_in_programming You don't type the braces, you click on the braces icon, which isn't obvious to me either. Or you can type four spaces at the front of each line (and blank lines above and below) a block to mark it like the configs.
– jonathanjo
yesterday
The wildcard mask got me. I entered it as a subnet mask. so, was my other traffic going as normal and NAT was just waiting for host 10.0.0.0 to translate?
– Reckless Liberty
yesterday
The wildcard mask got me. I entered it as a subnet mask. so, was my other traffic going as normal and NAT was just waiting for host 10.0.0.0 to translate?
– Reckless Liberty
yesterday
Also, can you please tell me how you edited my code to be in it's original format? thanks again
– Reckless Liberty
yesterday
Also, can you please tell me how you edited my code to be in it's original format? thanks again
– Reckless Liberty
yesterday
Re mask: I believe so. Re formatting: mark some text, click
{ } in little edit menu. For inline, use back-ticks. If you edit the question you'll see it.– jonathanjo
yesterday
Re mask: I believe so. Re formatting: mark some text, click
{ } in little edit menu. For inline, use back-ticks. If you edit the question you'll see it.– jonathanjo
yesterday
I can't edit, I'm too new., what's a backtick?
– Reckless Liberty
yesterday
I can't edit, I'm too new., what's a backtick?
– Reckless Liberty
yesterday
The back-tick is also sometimes called left-single-quote or grave (which I can't type here) en.wikipedia.org/wiki/Grave_accent#Use_in_programming You don't type the braces, you click on the braces icon, which isn't obvious to me either. Or you can type four spaces at the front of each line (and blank lines above and below) a block to mark it like the configs.
– jonathanjo
yesterday
The back-tick is also sometimes called left-single-quote or grave (which I can't type here) en.wikipedia.org/wiki/Grave_accent#Use_in_programming You don't type the braces, you click on the braces icon, which isn't obvious to me either. Or you can type four spaces at the front of each line (and blank lines above and below) a block to mark it like the configs.
– jonathanjo
yesterday
|
show 1 more comment
Reckless Liberty is a new contributor. Be nice, and check out our Code of Conduct.
draft saved
draft discarded
Reckless Liberty is a new contributor. Be nice, and check out our Code of Conduct.
Reckless Liberty is a new contributor. Be nice, and check out our Code of Conduct.
Reckless Liberty is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Network Engineering Stack Exchange!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Some of your past answers have not been well-received, and you're in danger of being blocked from answering.
Please pay close attention to the following guidance:
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
draft saved
draft discarded
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fnetworkengineering.stackexchange.com%2fquestions%2f55161%2fpat-not-translating-at-all%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
You really need to give us all the router configurations, and we need to know specifically what doesn't seem to be working. Also, if you are trying to run a routing protocol through NAPT, you must understand that is not going to work.
– Ron Maupin♦
yesterday