How to configure NAT on a Cisco 857 or 877 router

Asset 6

How to configure NAT on a Cisco 857 or 877 router

Posted on 22 October 2012 by Beaming Support

The following Example is for a Cisco ADSL router with one ATM interface and four fast Ethernet interfaces logically connected to a single VLAN.

To configure NAT you will need to define which interface is on the inside (in our case the VLAN) and the outside interface that is presented to the internet (the ATM interface).

Take the following example configuration:

interface dialer 1
ip address negotiated
ip inspect MYFIREWALL out
ip access-group 123 in
ip nat outside
interface vlan 1
ip address
ip nat inside
ip nat inside source list 101 interface dialer 1 overload
access-list 101 permit ip any

If you have ports that you need to forward using PAT (port address translation) you will need to add these using the IP NAT… command, for example:

ip nat inside source static TCP 80 interface dialer 1 80

If you have more than one external IP address on your internet connection you may wish to perform a one to one translation for an internal device. In this case you would use the following command instead:

ip nat inside source static
(where is your external IP address)

It is very likely that you have an access list that will block traffic coming in to the internet interface so you will need to allow the traffic through your filter. Using the example above you would need to add the follow statement to access-list 123 to permit inbound www (TCP 80) traffic.

access-list 123 permit tcp any host eq 80

Get the best of Beaming in your inbox


Business cyber security advice.

Straight to your inbox every month.

  • How-to guides to boost productivity and efficiency
  • Changes in voice and internet tech that your business should know
  • Cyber security advice anyone can follow

  • This field is for validation purposes and should be left unchanged.