I just want to talk about 26xx...
Now there is a problem in front of me, I don't know if I can say Cisco is bad ..
# Sh run
Ip nat inside source static 192.168.36.21 222. X. y.1
Ip nat inside source static 192.168.36.22 222. X. y.2
Ip nat inside source static 192.168.36.28 222. X. y.3
This is really strange ....
2610xm # Ping 192.168.36.28
Type escape sequence to abort.
Sending 5, 100-byte ICMP echos to 192.168.36.28, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/AVG/max = 8/8/12 MS
Ping your own SNAT...
2610xm # Ping 222. X. y.3
Type escape sequence to abort.
Sending 5, 100-byte ICMP echos to 222. X. y.3, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5)
I couldn't get through... I couldn't understand... I found that the MAC address is my own... but it should be okay if the MAC address is my own...
But this one can:
2610xm # Ping 192.168.36.22
Type escape sequence to abort.
Sending 5, 100-byte ICMP echos to 192.168.36.22, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/AVG/max = 1/2/4 MS
Likewise, on a vro, the Intranet port is a network segment with a mask of 22
2610xm # Ping 222. X. y.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP echos to 222. X. y.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/AVG/max = 1/2/4 MS
That's all. I'm so dizzy...
Switch to Linux and use iptables for DNAT. Just a moment. Damn it, Cisco...
But maybe I have insufficient knowledge...