public and private in a single interface in packet tracer

Hi,

I have a router with Fast Ethernet 0/0 connected to switch.
I want to do both public range and private range in that port.

My configuration is something like:

interface FastEthernet0/0
description LAN connection to Office
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
description Public-LAN 100.100.100.128/27 100.129-158
encapsulation dot1Q 1 native
ip address 100.100.100.129 255.255.255.224
!
interface FastEthernet0/0.2
description Private-NAT-DHCP 172.16.12.0/22 12.1-15.254
encapsulation dot1Q 2
ip address 172.16.12.1 255.255.252.0



When I connect PC via the switch, if I use a public IP, it works, but when I use the private IP, it does not work.

What step might I be missing?


I want to do the following:

int Fa0/0 -> connected to LAN
int Fa0/1 -> connected to WAN1
int Fa1/0 -> connected to WAN2

I want to use 100.100.100.128/27 ip in LAN as well as in DHCP/NAT
Only 172.16.12.0/22 must be NAT and not the public IP.

Please let me know how to do this.

The router is connected to a switch. Do i need to do anything in the switch ?


Thanks,

I managed to find out the ping/dhcp part.

it was the vlan setting that I had to do in the switch also.

Now DHCP is working, but NAT is not working.

Here is the router config:

uilding configuration...

Current configuration : 1832 bytes
!
version 12.2
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname R1
!
ip name-server 0.0.0.0
!
interface FastEthernet0/0
description LAN connection to Office
no ip address
duplex auto
speed auto
!
interface FastEthernet0/0.1
description Public-LAN 100.100.100.128/27 100.129-158
encapsulation dot1Q 1 native
ip address 100.100.100.129 255.255.255.224
!
interface FastEthernet0/0.2
description Private-NAT-DHCP 172.16.12.0/22 12.1-15.254
encapsulation dot1Q 172
ip address 172.16.12.1 255.255.252.0
ip nat inside
!
interface FastEthernet8/0
description Broadband Internet
ip address 165.21.100.230 255.255.255.252
ip nat outside
duplex auto
speed auto

!
ip nat inside source list 1 interface FastEthernet8/0 overload
ip classless
ip route 0.0.0.0 0.0.0.0 165.21.100.229
!
!
access-list 1 permit 172.16.12.0 0.0.3.255
!
ip dhcp excluded-address 172.16.12.1 172.16.12.99
!
ip dhcp pool dhcp01
network 172.16.12.0 255.255.252.0
default-router 172.16.12.1
dns-server 100.100.100.2
!
!
!
!
!
line con 0
line vty 0 4
login
!
!
!
end

Just to be clear this is what your trying to do correct?

Yes. Right.

100.100.100.129 is in one sub interface
172.16.12.1 is in another sub interface

nnbnbnnbnbI have to goto sleep right now but try looking up Inter-Vlan routing. I may be mistaken but I think thats what you need.





I'll take another look at it when I wake up.

NAT is actually what i am looking for.