When Network Address Translation (NAT) is configured on a router, the packets forwarded between the inside and outside interfaces that match the specified criteria are translated by the NAT router. The order of routing and address translation differs based on the direction of the traffic flow. The most common reason for routing failures when NAT is configured is insufficient information or lack of information on the routers while following this order of operation.
For packets traveling from the inside to the outside network, the router routes the packet before translating. The router needs a route for the destination address of the packet that arrives on the inside interface. Otherwise, it gets dropped. The address is then translated if it is forwarded out of the outside interface and matches the specified criteria. The translation is done based on an existing entry available in the NAT table, or a new entry is created depending on static or dynamic configuration of NAT.
For packets traveling from the outside to the inside network, the NAT router translates the address and then routes the packet. The router checks the NAT table to decide whether the packet will be translated. Then it checks the routing table for a route to the destination address in the packet, and packets are again dropped if there is no route available.
To determine if a route is available for the destination address, issue the show ip route command from privileged EXEC mode. If there is no route available, configure either a static route or a routing protocol to learn the destination network pointing to the correct interface.
If you are using a default route using the 0.0.0.0/0 network, issue the ip classless command under global configuration mode. This command is necessary for routing packets to unknown subnets of a major network whose other subnets exist in the routing table.
To determine if there is a translation entry available for a particular address and view the NAT table, issue the show ip nat translations command.
For a sample case and more information on the operation order with other features configured on a NAT interface, refer to NAT Order of Operation.
Hello I recently started using the smart licensing for the switches for our customer. Now every switch has internet access to tools1.cisco.com and tools2.cisco.com. However someone told me that it's possible to make the call-home through DNAcenter.I ...
Hi, Based on the BOM below, may i know what is the max. bandwidth that this router can cater? Thank you... ASR1001-HX=Cisco ASR1001-HX System,4x10GE+4x1GE,optional crypto+P/SCON-PSOP-ARX1001HPRTNR SUP OS 24X7X4 Cisco ASR1...
Hello Senior's, I am using using 2 nexus devices as a core which are configured in VPC and further connect downward with 2960 switches and almost 100 Vlan are configured, I am facing frequently TCN for all the Vlans, What might be the possible reason...
I have Two UCS-FI-6454 Fabric Interconnects that I want to use QSFP-H40G-CU1M DAC cables to connect to a C9500-24Y4C switch and I am having an issue with the links coming up. On the Cisco compatibility matrix is states "The 40G DAC can only be suppor...
Dears, Hope you all will be fine. I want to ask that if i am setting two parameters (latency 20ms and packet drop percentage 1%) in ipsla configuration to shift traffic from on tunnel to other if any of the tunnel matches criteria. My question is the...