How to make 2 NAT on Cisco?

Question

Cisco

There is a locale (172.30.0.0/24) it is necessary to organize 2 nats on cisco 1941 to access other subnets
10.17.3.129/27 Internet, and 192.168.0.1/24 local resources
since third-party routers do not know about our 172.30.0.0/32 I raise 2 NATs

interface GigabitEthernet0/0.3
description VLAN3-EMTS
encapsulation dot1Q 3
ip address 192.168.0.2 255.255.255.0
no ip proxy-arp
ip nat outside
ip virtual-reassembly in
!
interface GigabitEthernet0/0.4
description VLAN4-Internet
encapsulation dot1Q 4
ip address 10.17.3.132 255.255.255.192
no ip proxy-arp
ip nat outside
ip virtual-reassembly in
!
interface GigabitEthernet0/1
description Local network
ip address 172.30.0.1 255.255.255.0
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
no cdp enable
! ip nat pool ToInet
10.17.3.132 10.17.3.132 netmask 255.255.255.252 ip
nat pool ToPir 192.168.0.2 192.168.0.2 netmask 255.255.255.252 access-list 2 permit 172.30.0.10 0.0.0.0 access-list 2 permit 172.30.0.11 0.0.0.0 access-list 2 permit 172.30.0.12 0.0.0.0 .0.14 0.0.0.0 access-list 2 permit 172.30.0.15 0.0.0.0 access-list 3 permit 172.30.0.0 0.0.0.255

nat doesn't fuss, what am I doing wrong?

Answer 1

Maybe someone needs
interface GigabitEthernet0/0.3
description VLAN3-EMTS
encapsulation dot1Q 3
ip address 192.168.0.2 255.255.255.0
no ip proxy-arp
ip nat outside
ip nat enable
ip virtual-reassembly in
!
interface GigabitEthernet0/0.4
description VLAN4-Internet
encapsulation dot1Q 4
ip address 10.17.3.132 255.255.255.192
no ip proxy-arp
ip nat outside
ip virtual-reassembly in
!
interface GigabitEthernet0/1
description Local network Tereza93
ip address 172.30.0.1 255.255.255.0
no ip proxy-arp
ip nat inside
ip virtual-reassembly in
duplex auto
speed auto
no cdp enable
!
ip access-list extended acl_emts
permit ip 172.30.0.0 0.0.0.255 any
ip access-list extended acl_internet
permit ip 172.30.0.0 0.0.0.255 any
!
route-map ISP2 permit 10
match ip address acl_emts
match interface GigabitEthernet0/0.3
!
route-map ISP1 permit 10
match ip address acl_internet
match interface GigabitEthernet0/0.4
!
ip nat inside source route-map ISP1 interface GigabitEthernet0/0.4 overload
ip nat inside source route-map ISP2 interface GigabitEthernet0/0.3 overload