{"id":198,"date":"2016-04-18T22:02:49","date_gmt":"2016-04-19T04:02:49","guid":{"rendered":"https:\/\/www.guammie.com\/donovan\/?p=198"},"modified":"2016-04-18T22:12:11","modified_gmt":"2016-04-19T04:12:11","slug":"nat-for-remote-management","status":"publish","type":"post","link":"https:\/\/www.guammie.com\/donovan\/2016\/04\/18\/nat-for-remote-management\/","title":{"rendered":"nat for remote management"},"content":{"rendered":"<p>So I had an issue at work that went like this:&#160; We recently put in new managed switches at our remote sites.&#160; One of them failed and was replaced by our 3rd party subcontractor.&#160; They just do a hardware replacement and my team does the configuration.&#160; By default, the switches are configured to use 192.168.1.254 with no gateway info set.&#160; There is only a web UI enabled by default as well.&#160; I have to somehow open a browser and get access to that web console so I can configure the new switch.&#160; I have an 1841 or 1921 router at the other end to configure to make this work.&#160; NAT voodoo time.<\/p>\n<p>The scenario:<\/p>\n<p><a href=\"https:\/\/www.guammie.com\/donovan\/files\/2016\/04\/NAT-1.png\"><img loading=\"lazy\" decoding=\"async\" title=\"NAT\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; margin: 0px 0px 10px; display: inline; padding-right: 0px\" border=\"0\" alt=\"NAT\" src=\"https:\/\/www.guammie.com\/donovan\/files\/2016\/04\/NAT_thumb-1.png\" width=\"6\" height=\"6\" \/><\/a><a href=\"https:\/\/www.guammie.com\/donovan\/files\/2016\/04\/NAT-2.png\"><img loading=\"lazy\" decoding=\"async\" title=\"NAT\" style=\"border-top: 0px; border-right: 0px; background-image: none; border-bottom: 0px; padding-top: 0px; padding-left: 0px; border-left: 0px; margin: 0px 0px 10px; display: inline; padding-right: 0px\" border=\"0\" alt=\"NAT\" src=\"https:\/\/www.guammie.com\/donovan\/files\/2016\/04\/NAT_thumb-2.png\" width=\"244\" height=\"188\" \/><\/a><\/p>\n<p>The fix:<\/p>\n<blockquote>\n<p>conf t <\/p>\n<p>int f0\/0      <br \/>ip add 192.168.1.253 255.255.255.0       <br \/>ip nat inside <\/p>\n<p>int s0\/0\/0      <br \/>ip nat inside<\/p>\n<p>int l1      <br \/>ip address 10.15.4.249 255.255.255.252       <br \/>no shut <\/p>\n<p>exit<\/p>\n<p>router bgp 65000      <br \/>network 10.15.4.248 mask 255.255.255.252<\/p>\n<p>exit<\/p>\n<p>ip nat outside source static 192.168.1.254 10.15.4.250      <br \/>ip nat inside source static 10.210.23.8 192.168.1.100       <br \/>ip route 10.15.4.250 255.255.255.255 f0\/0 1<\/p>\n<p>end<\/p>\n<\/blockquote>\n<p>Now I can open a browser to 10.15.4.250 and it works.&#160; When doing any commands reaching back to my computer (tftp), I used 192.168.1.100 as the server (tftp:\/\/192.168.1.100\/startup-config) and that worked.<\/p>\n<p>That\u2019s it.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>So I had an issue at work that went like this:&#160; We recently put in new managed switches at our remote sites.&#160; One of them failed and was replaced by our 3rd party subcontractor.&#160; They just do a hardware replacement and my team does the configuration.&#160; By default, the switches are configured to use 192.168.1.254 [&hellip;]<\/p>\n","protected":false},"author":4,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[4,3],"tags":[],"class_list":["post-198","post","type-post","status-publish","format-standard","hentry","category-cisco","category-networking"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p1tGEc-3c","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/www.guammie.com\/donovan\/wp-json\/wp\/v2\/posts\/198","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.guammie.com\/donovan\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.guammie.com\/donovan\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.guammie.com\/donovan\/wp-json\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/www.guammie.com\/donovan\/wp-json\/wp\/v2\/comments?post=198"}],"version-history":[{"count":3,"href":"https:\/\/www.guammie.com\/donovan\/wp-json\/wp\/v2\/posts\/198\/revisions"}],"predecessor-version":[{"id":207,"href":"https:\/\/www.guammie.com\/donovan\/wp-json\/wp\/v2\/posts\/198\/revisions\/207"}],"wp:attachment":[{"href":"https:\/\/www.guammie.com\/donovan\/wp-json\/wp\/v2\/media?parent=198"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.guammie.com\/donovan\/wp-json\/wp\/v2\/categories?post=198"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.guammie.com\/donovan\/wp-json\/wp\/v2\/tags?post=198"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}