I'm working with an ISR 4331 running 17.03.03, and deploying containers. The router has a routed lo0 interface which is used as the management IP. We don't use the built-in mgmt0/g0 interface, and I don't want to provision a routed network on a virtualportgroup interface (provisioning a new subnet for a couple thousand sites doesn't scale well for this project)
I simply want my containers to be NATted behind the lo0 interface, able to access anything on our network, with the option to create a PAT for any services those containers may provide, say point tcp/5001 to containerA and tcp/5002 to containerB
