Re: NAT - HSRP Problem

Klatta · ‎07-06-2005

Hello, I have a Problem with NAT and HSRP. I have configure a Source inside and a source outside NAT. (see attach. Config,) and two HSRP Groups.

When I Ping I get no Answer but the HSRP work propper ?

Georg Pauwen · ‎07-06-2005

Hello,

in a ´normal´NAT configuration, the standby router does have the translation table of the active router, and during the cutover connections time out and fail.

There are basically two enhancements/workarounds that let NAT interact with HSRP, check the documents below:

NAT Stateful Failover of Network Address Translation

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t13/ftsnat.htm

NAT Static Mapping Support with HSRP for High Availability

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t4/ftnthsrp.htm

HTH,

GP

Klatta · ‎07-06-2005

Hello,

in my Config I have "try"? to configure: HSRP for High Availability, see:

interface ethernet0/0

ip address 172.16.165.147 255.255.255.240

ip nat outside

standby 2 ip 172.16.165.146

standby 2 preempt

standby 2 name test

!

interface Ethernet0/1

ip address 172.21.5.4 255.255.255.240

ip nat inside

standby 1 ip 172.21.5.6

standby 1 preempt

standby 1 name home

ip nat inside source static 10.6.79.34 192.168.250.193 redundancy home

ip nat outside source static network 192.168.0.0 172.19.0.0 /16 redundancy test

but in the "NAT Static Mapping Support with HSRP for High Availability " document there is a "bvi" ???

Must I configure a additional HSRP Group on the bvi Interface ??? which Interface should i track ??? also the bvi Interfaces never comes Up, where ist the mistake ?

e.g:

bridge irb

interface ethernet0/0

ip address 172.16.165.147 255.255.255.240

standby 2 ip 172.16.165.146

standby 2 preempt

bridge-group 1

!

interface Ethernet0/1

ip address 172.21.5.4 255.255.255.240

standby 1 ip 172.21.5.6

standby 1 preempt

bridge group 2

interface bvi1

ip address 10.10.10.1 255.255.255.0

standby 3 ip 10.10.10.3

standby 3 name test

standby 3 preempt

no ip redirects

ip nat outside

standby 3 track (???? Interface ????) ???

interface bvi2

ip address 20.20.20.1 255.255.255.0

standby 4 ip 20.20.20.3

standby 4 name home

standby 4 preempt

no ip redirects

ip nat inside

standby 4 track (???? Interface ????) ???

ip nat inside source static 10.6.79.34 192.168.250.193 redundancy home

ip nat outside source static network 192.168.0.0 172.19.0.0 /16 redundancy test

I have also try this Config withaot the redundancy and "standby name" commands

Router 1:

interface ethernet0/0

ip address 172.16.165.147 255.255.255.240

ip nat outside

standby 2 ip 172.16.165.146

standby 2 preempt

!

interface Ethernet0/1

ip address 172.21.5.4 255.255.255.240

ip nat inside

standby 1 ip 172.21.5.6

standby 1 preempt

ip nat inside source static 10.6.79.34 192.166.250.193

ip nat outside source static network 192.168.0.0 172.19.0.0 /16

ip classless

ip route 0.0.0.0 0.0.0.0 172.16.165.145

ip route 10.6.79.32 255.255.255.240 172.21.5.2

and it seems it works propper, but what ist the best way to configure HSRP with NAT ????

Thanks

TK