Help nat rules

[spivy66]

Can someone help create a nat rule..

I have two interfaces on my 2600

fasteth0/1 192.168.2.2
fasteth0/0 192.168.1.10

I want all traffic comming from 192.168.2.2 interface
to look like it's from fasteth0/0 192.168.1.10...
the default gateway resort is 192.168.1.1.

thank you

 

[brianinms]

What is your intention in wanting it configured that way?

 

[spivy66]

Hello,
Right now i have my firewall doing the routing between theses subnets. I want to take the firewall out of the picture and have the firewall act as a firewall only..so by creating a nat rule all traffic for will look like its comming from 192.168.1.10 .I'll have All my users with a 192.168.2.0/24 address look like it comming from 192.168.1.10 ..


so here's my config now

cisco 2600
f0/0 192.168.1.10
f0/1 192.168.2.2


firewall has route as 192.168.2.0/24 --->192.168.1.10
firewall also has a interface 192.168.2.1


on the cisco 2600 i also have dhcp server setup

ip dhcp pool wwdfv
network 192.168.2.0 255.255.255.0
dns-server xxxxxx
default-router 192.168.2.2
domain-name xxxx.com
lease infinite

interface FastEthernet0/0
ip address 192.168.1.10 255.255.255.0
ip nat outside
speed 100
full-duplex
!
interface FastEthernet0/1
ip address 192.168.2.2 255.255.255.0
ip nat inside
speed 100
full-duplex
!
ip nat inside source static 192.168.2.2 192.168.1.10
ip classless
ip route 0.0.0.0 0.0.0.0 192.168.1.1


so i just want to get the firwall out of the picture.If what i said can't be done I an open for any options.

Thank you for your response.

 

[brianinms]

Your configuration isnt making sense as you are using the router for routing, so why wouldnt the firewall be a firewall?

 

[plshlpme]

the config doesnt need to make sense to us..
so here is what you need

access-list 1 permit 192.168.2.0 0.0.0.255
ip nat inside source list 1 interface fa0/0 overload

if access-lsit 1 is in use just use some other number...
with these commands everything that leaves your router will look like it came from your 192.168.1.10 ip.
if you want to add more subnets later on.. they have to be added to the access-list or else they will not get natted.