[c-nsp] C876 - Forced to use NAT Virtual Interface

Gaurav Sabharwal gaurav at inwire.net
Wed Feb 28 04:29:10 EST 2007


Have a Cisco 876 router running 12.4(6)T6 IOS release and have noticed 
that classic NAT translation does not works. Below is the relevant 
configuration.

!
interface Virtual-PPP1
  ip address negotiated
  ip nat outside
  ip virtual-reassembly
  fair-queue
  no cdp enable
  ppp authentication chap callin
  ppp chap hostname testuser
  ppp chap password 0 testpass
  ppp direction callout
  pseudowire 172.17.101.1 10 pw-class pwclass1
!
interface Vlan1
  ip address 192.168.10.1 255.255.255.128
  ip nat inside
  ip virtual-reassembly
!
ip nat source static 192.168.10.1 10.10.0.17
ip nat source static 192.168.10.2 10.10.0.18
ip nat source static 192.168.10.3 10.10.0.19
ip nat source static 192.168.10.4 10.10.0.20
!

show classic NAT statistics

rtr# sh ip nat stat
Total active translations: 0 (0 static, 0 dynamic; 0 extended)
Outside interfaces:
   Dialer1, Virtual-Access1

Inside interfaces:
   Vlan1
Hits: 0  Misses: 0
CEF Translated packets: 0, CEF Punted packets: 0
Expired translations: 0
Dynamic mappings:

Queued Packets: 0

rtr# show ip nat stat
Total active translations: 0 (0 static, 0 dynamic; 0 extended)
Outside interfaces:
   Dialer1, Virtual-Access1
Inside interfaces:
   Vlan1

Hits: 0  Misses: 0
CEF Translated packets: 0, CEF Punted packets: 0
Expired translations: 0
Dynamic mappings:
Queued Packets: 0

show stats for NVI

rtr# sh ip nat nvi stat
Total active translations: 4 (4 static, 0 dynamic; 0 extended)
NAT Enabled interfaces:

Hits: 0  Misses: 0
CEF Translated packets: 0, CEF Punted packets: 0
Expired translations: 0
Dynamic mappings:


rtr# show ip nat nvi trans
Pro Source global      Source local       Destin  local      Destin  global
--- 10.10.0.17         192.168.10.1       ---                ---
--- 10.10.0.18         192.168.10.2       ---                ---
--- 10.10.0.19         192.168.10.3       ---                ---
--- 10.10.0.20         192.168.10.4       ---                ---

Reading the documents, my understanding is that the NVI interface will 
be triggered when "ip nat enable" command is used on the interfaces. 
Anybody seen this issue or point the obvious thing that I am missing in 
the configuration?

Thanks,
- Gaurav


More information about the cisco-nsp mailing list