Привет всем! Читал все эхи насчет НАТа..
Вопрос немного в другом:
------------------------------------
Вот так вот работает:
------------------------------------
!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!
enable secret cisco
enable password cisco2
!
!
!
!
!
ip subnet-zero
!
ip audit notify log
ip audit po max-events 100
!
!
!
interface Loopback0
ip address 192.0.0.1 255.255.255.255
ip accounting output-packets
ip nat inside
!
interface FastEthernet2/0
ip address 192.168.0.1 255.255.0.0 secondary
ip address 10.70.1.1 255.255.0.0
ip nat outside
no ip route-cache
no ip mroute-cache
ip policy route-map test
speed 100
full-duplex
no cdp enable
!
!
ip nat pool IP-OUT 10.70.1.6 10.70.1.6 netmask 255.255.0.0
ip nat inside source list 1 pool IP-OUT overload
ip classless
ip route 0.0.0.0 0.0.0.0 10.70.0.1
no ip http server
!
access-list 1 permit 192.168.0.0 0.0.255.255
access-list 101 deny   ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255
access-list 101 permit ip any any
route-map test permit 10
match ip address 101
set interface Loopback0
!
!
line con 0
transport input none
speed 115200
line 33 38
line aux 0
line vty 0 4
password cisco
login
!
end

------------------------------------
А вот так уже не работает:
------------------------------------

!
version 12.1
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname Router
!
enable secret cisco
enable password cisco2
!
!
!
!
!
ip subnet-zero
!
ip audit notify log
ip audit po max-events 100
!
!
!
interface Loopback0
ip address 192.0.0.1 255.255.255.255
ip accounting output-packets
ip nat inside
!
interface FastEthernet2/0
ip address 192.168.0.1 255.255.0.0 secondary
ip address A.B.C.D 255.255.255.0
ip nat outside
no ip route-cache
no ip mroute-cache
ip policy route-map test
speed 100
full-duplex
no cdp enable
!
!
ip nat pool IP-OUT A.B.C.E A.B.C.E netmask 255.255.255.0
ip nat inside source list 1 pool IP-OUT overload
ip classless
ip route 0.0.0.0 0.0.0.0 A.B.C.A
no ip http server
!
access-list 1 permit 192.168.0.0 0.0.255.255
access-list 101 deny   ip 192.168.0.0 0.0.255.255 192.168.0.0 0.0.255.255
access-list 101 permit ip any any
route-map test permit 10
match ip address 101
set interface Loopback0
!
!
line con 0
transport input none
speed 115200
line 33 38
line aux 0
line vty 0 4
password cisco
login
!
end

--------------------------------------------
все что я сделал во втором конфиге, дак это поменял айпишники с локальной 10-ки на реальные A.B.C.D...

Что здесь не так?

• НАТ на одном интерфейсе, ВОЛКА, 22:24 , 24-Ноя-03, (1)  
  • НАТ на одном интерфейсе, Sonne, 10:32 , 25-Ноя-03, (2)  
  • НАТ на одном интерфейсе, White_Eagle, 12:18 , 25-Ноя-03, (3)  
    • НАТ на одном интерфейсе, Sonne, 15:08 , 25-Ноя-03, (4)  
      • НАТ на одном интерфейсе, White_Eagle, 08:59 , 28-Ноя-03, (5)