Source & Destination NAT in VRF Aware Manner For Shared Service Access

 

Hi Guys,

 

I am trying to get source and destination nat applied on a single packet in VRF aware scenario. I could only get either source or destination nat working at a time but not both together with different combinations. Looking for suggestions:

 

Topology - http://imgur.com/DA3S57z

 

Configuration:

Int f0/0

 ip nat outside

 

int f0/1 , f0/2

 ip nat inside

 

ip nat inside source static 10.0.0.10 11.0.0.10 vrf RED

ip nat inside source static 10.0.0.10 12.0.0.10 vrf BLUE

ip nat outside source static 202.0.0.2 192.168.5.2

 

ip route vrf RED 0.0.0.0 0.0.0.0 f0/0 192.168.5.2 global

ip route vrf BLUE 0.0.0.0 0.0.0.0 f0/0 192.168.5.2 global

ip route 11.0.0.0 255.0.0.0 f0/1

ip route 12.0.0.0 255.0.0.0 f0/2

 

With this config I could get Source translated but not destination.

Comments

  • You can't extend those VRFs up to Fa0/0 interface of the nat router?

    I believe it should work fine like this.

Sign In or Register to comment.