topic Re: NAT and any statement in Routing and SD-WAN

NAT and any statement

benoit.lecompt — Mon, 04 Mar 2019 02:53:23 GMT

Hello everybody,

I have many networks that I need to NAT.

I don't know exactly what are these networks so, I tried to nat with an 'any' statment in my ACL.

But, it doesn't works (http://www.cisco.com/warp/public/556/nat-faq.html#qa39)

So I am looking to do this by using a route-map with a 'match interface' condition.

Has anybody tried this before ?

interface GigabitEthernet 0/0

ip nat inside

interface GigabitEthernet 0/1

ip nat outside

route-map NATme permit 10

match interface GigabitEthernet 0/0

ip nat pool NAT-pool 10.10.10.0 10.10.10.7 prefix-length 29 type rotary

ip nat inside source route-map NATme pool NAT-pool

Thanks !

Re: NAT and any statement

ohassairi — Mon, 24 Sep 2007 10:55:22 GMT

if you don't know the origin of the paquet, just use an opened acl :acess-list 1 permit any any.

but: be sure g0/0 and 0/1 are L3 and you have a static route that route the trafic through g0/1

Re: NAT and any statement

paolo bevilacqua — Mon, 24 Sep 2007 17:57:37 GMT

Try using list with a permit for ip 0.0.0.0 255.255.255.255.

Re: NAT and any statement

paolo bevilacqua — Mon, 24 Sep 2007 18:07:41 GMT

Hi, as mentioned by the poster and documented per link above, access-list any is not to be used with nat and in fact I found that for source, it causes problems.

Re: NAT and any statement

benoit.lecompt — Tue, 25 Sep 2007 08:10:51 GMT

Yes, but it will become an any any statment:

ip access-list standard 10

permit 0.0.0.0 255.255.255.255

s ip access-lists 10

Standard IP access list 10

permit any

😞

Re: NAT and any statement

paolo bevilacqua — Tue, 25 Sep 2007 09:00:17 GMT

Well, have you tried? Let us know.

Re: NAT and any statement

benoit.lecompt — Sat, 13 Oct 2007 05:40:12 GMT

Hello,

Yes, I tried this statement and it works but I hope I will not have 'unexpected behavior' has said in http://www.cisco.com/warp/public/556/nat-faq.html#qa39

Thanks

Re: NAT and any statement

paolo bevilacqua — Sat, 13 Oct 2007 09:41:05 GMT

Now try to telnet to the router from outside to the outside interface. If it works, you are ok.

Inability to do so, is the 'unexpected behavior' mentioned.

Re: NAT and any statement

benoit.lecompt — Sat, 13 Oct 2007 20:29:12 GMT

OK, I will try this asap !

Thank you !