[c-nsp] Restrictions for NAT Integration with MPLS VPNs

Joe Maimon jmaimon at ttec.com
Thu Mar 17 19:05:26 EST 2005


Restrictions for NAT Integration with MPLS VPNs

Inside VPN to VPN with NAT is not supported.

from

http://www.cisco.com/en/US/products/sw/iosswrel/ps1839/products_feature_guide09186a00801145f5.html#wp1035671


Does this mean that I should not expect this to work?
(cause that would really suck)


ip vrf RED
  rd 10:10
!
int fa0/0/0
ip vrf forwarding RED
ip address 192.168.1.1 255.255.255.0
ip nat inside
!
int fa0/1/0
ip vrf forwarding RED
ip address 66.16.17.1 255.255.255.0
ip nat outside
!
ip nat inside source list inside-nat interface fa0/1/0 overload
!
ip access-list extended inside-nat
  permit ip 192.168.0.0 0.0.255.255 any
!

where a show ip route vrf RED 0.0.0.0 comes back with

Routing entry for 0.0.0.0/0, supernet
   Known via "rip", distance 120, metric 1, candidate default path
   Redistributing via rip
   Last update from 66.16.17.2 on Fastethernet0/1/0, 00:00:22 ago
   Routing Descriptor Blocks:
   * 66.16.17.2, from 66.16.17.2, 00:00:24 ago, via Fastethernet0/1/0
       Route metric is 1, traffic share count is 1





More information about the cisco-nsp mailing list