Static NAT with route-maps.

[johnleeee]

Hi all,

I need help with static NAT with route-maps.

I didnt find any good paper about this problem so could someone deeply explain me where I can use this combination and how this works together.

Some good document deeply appreciate.

i.e.

ip nat inside source static (ip address)( ip address )route-map (name of route map)

rg

jl

[Richard Gallagher]

Have you read the following links:

NAT Support for Multiple Pools Using Route Maps

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080093fca.shtml

NAT - Ability to Use Route Maps with Static Translations

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t4/ftnatrt.htm

[johnleeee]

Thanks for adv.

Yes I read these documents.

If Im clear when used ip nat inside source route-map

name of route map pool name of pool than everything from route map will be translated accordingly defined

pool in command.

But what about ip nat inside source static?

There is static translation one station ip address to another ip address but on the end is route-map command. Does it mean that after translation ewerything will be send to destination defined in this route-map? If yes why I need do this trough route-map?

thanks

jl

[jolmo]

I'm not sure what you are asking but I'll try to explain how static NAT with route-maps works and how I use it.

When I use static NAT with route-maps, in route-maps I use "match" ip ACL clauses. In this way, static translation only occurs when packet matches ACL. Routing process is not affected by route-maps

I think you'll see better with an example:

Here host 10.10.10.1 is translated to 3.3.3.3 when going to network 192.168.1.0/24 and 2.2.2.2 when going to any other one.

ip nat inside source static 10.10.10.1 2.2.2.2 route-map DEFAULT

ip nat inside source static 10.10.10.1 3.3.3.3 route-map NET

route-map DEFAULT permit 10

match ip address 102

route-map NET permit 10

match ip address 103

access-list 102 deny ip host 10.10.10.1 192.168.1.0 0.0.0.255

access-list 102 permit ip host 10.10.10.1 any

access-list 103 permit ip host 10.10.10.1 192.168.1.0 0.0.0.255

It works for me.

HTH

[johnleeee]

Thanks guy,

for explanation.Thats enough.

rg

jl