Как сделать 2 NAT на Cisco?

Question

[Максим]

Есть локалка (172.30.0.0/24) необходимо организовать 2 нат на cisco 1941 для доступа в другие подсети
10.17.3.129/27 Интернет, и 192.168.0.1/24 локальные ресурсы

так как сторонние маршрутизаторы не знают о нашей 172.30.0.0/32 поднимаю 2 NAT

interface GigabitEthernet0/0.3
description VLAN3-EMTS
encapsulation dot1Q 3
ip address 192.168.0.2 255.255.255.0
no ip proxy-arp
ip nat outside
ip virtual-reassembly in
!
interface GigabitEthernet0/0.4
description VLAN4-Internet
encapsulation dot1Q 4
ip address 10.17.3.132 255.255.255.192
no ip proxy-arp
ip nat outside
ip virtual-reassembly in
!
interface GigabitEthernet0/1
description Local network
ip address 172.30.0.1 255.255.255.0
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
no cdp enable
!
ip nat pool ToInet 10.17.3.132 10.17.3.132 netmask 255.255.255.252
ip nat pool ToPir 192.168.0.2 192.168.0.2 netmask 255.255.255.252
ip nat inside source list 2 pool ToInet
ip nat inside source list 3 pool ToPir
!

access-list 2 permit 172.30.0.10 0.0.0.0
access-list 2 permit 172.30.0.11 0.0.0.0
access-list 2 permit 172.30.0.12 0.0.0.0
access-list 2 permit 172.30.0.13 0.0.0.0
access-list 2 permit 172.30.0.14 0.0.0.0
access-list 2 permit 172.30.0.15 0.0.0.0
access-list 3 permit 172.30.0.0 0.0.0.255

нат не фурычит, что я делаю не так?

Answer 1

[Максим]

Может кому нужно будет

interface GigabitEthernet0/0.3
description VLAN3-EMTS
encapsulation dot1Q 3
ip address 192.168.0.2 255.255.255.0
no ip proxy-arp
ip nat outside
ip nat enable
ip virtual-reassembly in
!
interface GigabitEthernet0/0.4
description VLAN4-Internet
encapsulation dot1Q 4
ip address 10.17.3.132 255.255.255.192
no ip proxy-arp
ip nat outside
ip virtual-reassembly in
!
interface GigabitEthernet0/1
description Local network Tereza93
ip address 172.30.0.1 255.255.255.0
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
no cdp enable
!
ip access-list extended acl_emts
permit ip 172.30.0.0 0.0.0.255 any
ip access-list extended acl_internet
permit ip 172.30.0.0 0.0.0.255 any
!
route-map ISP2 permit 10
match ip address acl_emts
match interface GigabitEthernet0/0.3
!
route-map ISP1 permit 10
match ip address acl_internet
match interface GigabitEthernet0/0.4
!
ip nat inside source route-map ISP1 interface GigabitEthernet0/0.4 overload
ip nat inside source route-map ISP2 interface GigabitEthernet0/0.3 overload