topic Re: WESM and dynamic NAT in Switches, Hubs, and Modems

WESM and dynamic NAT

ENRICO BASSI_1 — Wed, 13 Feb 2008 12:10:53 GMT

The goal on this configuration is to nat the users in the wireless side (inside) of the wesm in order to browse Internet (outside), reachable trough a routing infrastructure.
The problem is that this configuration is not working.
I can't see any entry in the wesm ip nat translation table.
Any help would be appreciated.
Thanks in advance
Enrico

Re: WESM and dynamic NAT

Mohieddin Kharnoub — Wed, 13 Feb 2008 15:24:54 GMT

Hi

Usually the configuration of the WESM in the 5400/5300 switch will be encrypted, (we need agent 007's help to decrypt it) :)

Anyway, you can explain what you've done in the Web page of the WESM and write it here.

Good Luck !!!

Re: WESM and dynamic NAT

ENRICO BASSI_1 — Wed, 13 Feb 2008 15:57:04 GMT

Ok
1) Enabled Ip routing on the WESM
2) Defined the interface (VLAN 1020) for the wireless users and bound it to the assigned WLan
3) Assigned ip address to the vlan 1020 (172.31.20.1/24)
4) Configured a dhcp server for the vlan 1020 (172.31.20.101-200 - dg 172.31.20.1 - dns x.x.x.x)
5) Defined an extended acl (Ospiti-GP) for the dynamic NAT:
ip access-list extended Ospiti-GP
permit ip 172.31.20.0/24 any log rule-precedence 10
6) Defined the interface vlan 1020 as inside interface
7) Configured the nat statement:
ip nat inside source list Ospiti-GP interface vlan1 overload

The clients in the wireless area are able to receive the ip address form the dhcp, but their ip addresses are not source natted.

Anyway in the attached configurations.txt file you can see part of the configuration in clear text.
Thank you
Enrico