CGNAT Cisco

Configuração passo a passo

1. 🔌 Subinterface da VLAN 85 (LAN)

interface Port-channel2.85
 description VLAN-85
 encapsulation dot1Q 85
 ip address 192.168.85.1 255.255.255.0
 ip nat inside

---

2. 🌐 Interface de saída com IP 131.100.212.250 (WAN)

Certifique-se de que existe uma interface configurada assim:

interface Port-channel1.X
 description LINK-INTERNET
 encapsulation dot1Q XXX
 ip address 131.100.212.250 255.255.255.252
 ip nat outside

Se ainda não existe, você pode criar uma subinterface dedicada com esse IP.

---

3. 🛡 ACL para tráfego da VLAN 85

ip access-list extended ACL-VLAN85
 permit ip 192.168.85.0 0.0.0.255 any

---

4. 🔄 NAT Overload com IP fixo da interface

ip nat inside source list ACL-VLAN85 interface Port-channel1.X overload

Substitua Port-channel1.X pela interface real com o IP 131.100.212.250.

---

✅ Resumo completo da configuração

interface Port-channel2.85
 description VLAN-85
 encapsulation dot1Q 85
 ip address 192.168.85.1 255.255.255.0
 ip nat inside
!
interface Port-channel1.XXX
 description LINK-INTERNET
 encapsulation dot1Q XXX
 ip address 131.100.212.250 255.255.255.252
 ip nat outside
!
ip access-list extended ACL-VLAN85
 permit ip 192.168.85.0 0.0.0.255 any
!
ip nat inside source list ACL-VLAN85 interface Port-channel1.XXX overload

---

🔍 Verificação

show ip nat translations
show ip nat statistics
ping 8.8.8.8 source 192.168.85.1