[c-nsp] VRF Static NAT

[Alexander Fossa | Xifos]

Hi Peter,

interface Vlan301
 ip address 10.10.4.1 255.255.255.252
 ip nat outside


interface Vlan601
ip address 11.22.240.1 255.255.255.0
 no ip redirects
 ip nat inside
end


ip nat inside source static 11.22.240.60 10.10.4.100

Then from another router on Vlan301, I can ping 10.10.4.100 and get a
response.

Router#ping 10.10.4.100
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.10.4.100, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/8 ms



However, I then want to put Vlan 301 into VRF BTW.

interface Vlan301
 ip vrf forwarding BTW
 ip address 10.10.4.1 255.255.255.252
 ip nat outside


#
4w0d: NAT: Entry assigned id 70
4w0d: NAT*: s=10.10.4.2, d=10.10.4.100->11.22.240.60 [355]
4w0d: NAT*: s=10.10.4.2, d=10.10.4.100->11.22.240.60 [356]
4w0d: NAT*: s=10.10.4.2, d=10.10.4.100->11.22.240.60 [357]
4w0d: NAT*: s=10.10.4.2, d=10.10.4.100->11.22.240.60 [358]
4w0d: NAT*: s=10.10.4.2, d=10.10.4.100->11.22.240.60 [359]

#show ip nat translations
Pro Inside global         Inside local          Outside local
Outside global
icmp 10.10.4.100:71 11.22.240.60:71       10.10.4.2:71
10.10.4.2:71
--- 10.10.4.100 11.22.240.60          ---                   ---

Any ideas? Do I need to route the VRF?

Thanks,

Alex








On 28/02/2013 17:12, "Peter Rathlev" <peter at rathlev.dk> wrote:

>On Wed, 2013-02-27 at 21:52 +0000, Alexander Fossa | Xifos wrote:
>> Hopefully it is something simple that I'm missing!
>
>Yes. A description of what you've tried so far, how it went and any
>relevant configuration. :-)
>
>> Internal Server (a.b.c.60/24)-------- Cisco 7600a (SVI a.b.c.1/24)
>> 
>> Cisco 7600a (VRF abc) 10.10.4.1 --------------- Cisco 1921 - 10.10.4.2
>> 
>> What I'm looking to do is expose a.b.c.60 (global routing table) to
>> the VRF abc, by using a static NAT.
>
>I don't think the 7600 does NVI (in hardware at least) but otherwise
>that would probably be a simple way to do it.
>
>-- 
>Peter
>
>


This e-mail is governed by our usage policy which can be viewed at www.xifos.net/disclaimer

This message has been sent by the Xifos Hosted Exchange 2010 environment. Further details at www.xifos.net