[nsp] PPPoE and NAT on the LNS

[Dennis Peng]

NAT on the LNS *should* work. I notice you have an ip address
configured directly on the vtemplate. Could you put this IP address on
a loopback interface and unnumber the vtemplate to the loopback?
That's normally how it is configured. If it still doesn't work, you
may want to open up a case with TAC to have someone take a look.

Dennis

Krzysztof Adamski [k at adamski.org] wrote:
> Is it possible to NAT users that come to an LNS through PPPoE.
> My virtual template contains nat inside:
> interface Virtual-Template1
>  mtu 1492
>  ip address 10.253.254.1 255.255.255.0
>  ip nat inside
>  peer default ip address pool CMLPOOL
> 
> and #sh ip nat statistics
> Total active translations: 15 (12 static, 0 dynamic; 10 extended)
> Outside interfaces:
>   Ethernet0
> Inside interfaces:
>   Loopback0, Virtual-Access1, Virtual-Access2, Virtual-Access3
>   Virtual-Access4, Virtual-Template1
> Hits: 28  Misses: 0
> Expired translations: 0
> Dynamic mappings:
> -- Inside Source
> [Id: 1] route-map NONAT interface Ethernet0 refcount 0
> 
> and here are the bits from the NAT config:
> ip nat inside source route-map NONAT interface Ethernet0 overload
> access-list 131 deny   ip 10.0.0.0 0.0.0.255 10.0.0.0 0.0.0.255
> access-list 131 permit ip 10.0.0.0 0.0.0.255 any
> route-map NONAT permit 10
>  match ip address 131
> 
> NAT is not working, debugging NAT shows nothing, is this even possible?
> I'm running Version 12.2(17a)
> 
> TIA
> K
> 
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/