Cisco ip nat overload algorithm

cisconat;

I have a cisco 7206 vxr with 15.0 ios(c7200p-adventerprisek9-mz.151-3.S0a.bin) .I configured the overloaded nat there.
some of confs:

ip nat pool nat a.b.c.2 a.b.c.254 netmask 255.255.255.0

ip nat inside source list nat pool nat overload

Also i do when needed ip nat inside and outside commands.

But the sh ip nat statistics gives :

Total active translations: 278405 (0 static, 278405 dynamic; 278460 extended)
Outside interfaces:
  GigabitEthernet0/1.42, GigabitEthernet0/3, GigabitEthernet0/3.9
  GigabitEthernet0/3.52
Inside interfaces: 
  GigabitEthernet0/1.45
Hits: 1325770289  Misses: 0
CEF Translated packets: 1248777875, CEF Punted packets: 1186298958
Expired translations: 569696201
Dynamic mappings:
-- Inside Source
[Id: 1] access-list nat pool nat refcount 278416
 pool nat: netmask 255.255.255.0
    start **a.b.c.2 end a.b.c.254**
    type generic, total addresses 253, **allocated 22 (8%)**, misses 0
nat-limit statistics:
 max entry: max allowed 0, used 0, missed 0

What is algorith of allocating public ip?(where i can read info about it)?

How i can utilizate all of ips?

Best Answer

Put type rotary at the end of your pool statement:

ip nat pool Pool_Name 4.x.x.241 4.x.x.253 netmask 255.255.255.240 type rotary

Related Solutions

Cisco NAT Config for DSL

This can't be that hard -- but I'm thinking I'm pretty lame. Any advice?

I hate to suggest something non-cisco, but you are running older end of life'd Cisco routers -- so I will. When my PIX 506e burned up, I replaced it with a tinsy system from LogicSupply running Vyatta and have been nothing but impressed.

I just shipped out a production VMWare machine running 6 static IP's, 3 internal networks (10.0.1.0/24, 10.0.2.0/24, 10.0.3.0/24), all natting out of one IP, and all 6 external IP's randomly port forwarding inward with no respect for any one to one mappings.

If you had a spare machine you could replace the 2600 with, or purchase something solid state from LogicSupply -- you would be extremely impressed with Vyatta .. and want to shoot yourself in the foot for using the 2600 for anything but a doorstop.

password 7 0519091A3549430C

It goes without saying -- but you've posted your private IP's, router, router config, and hashed password online. Your going to change that password right?

Cisco ios config

I am not quite sure what you want, but if you just want to map port 80 of an external to ip to an internal ip port 80. I think you pretty much have it, but I think you might just need to change:

ip nat inside source static tcp  80 10.10.10.60 80 extendable

to

ip nat inside source static tcp 98.123.123.94 80 10.10.10.60 80 extendable

But besides this, if this is production, once you have it working the way you think you want. You might want to pay a consultant to come in and check your work, it doesn't get much more important than the router.

Related Topic