Catalyst 9300 and overlapping subnets

[didier.martin@arumtec.net]

Hi,

I would like to know if it's possible through multi vrf, nat, to connect 3 identical subnets to a catalyst 9300. My goal is to manage these platforms from a unique subnet with desktops.

I have tried to configure the Catalyst 9300 to test this, but it's a native network essentials switch and even if i get an evaluation license of Network advantage, not sure it's work as some commands are missing (ex : "ip vrf" is unknown in interfaces). 

[Giuseppe Larosa]

Hello didier.martin@arumtec.net ,

new VRF syntax is IPv4 / IPv6 agnostic on interfaces

try to use

vrf definition NAME

address-family ipv4 unicast

rd 100:100

route-target 100:100 both

int gi0/x

no switchport

vrf forwarding NAME

ip address 10.x.y.z 255.255.255.0

or on an SVI

Hope to help

Giuseppe

[didier.martin@arumtec.net]

Thank you. It corrects the configuration of my vrf. But is my goal is doable ? Is there an example of this kind of configuration ?

[Giuseppe Larosa]

Hello Didier,

with the external router available that performs NAT you should be able to achieve your goal.

without the external router I would say it is not possible.

You should use three dedicated pools for each VLAN and you should have a subinterface for each VRF to connect to the Cat9300.

From the devices on the left they should point to the "global IP address" and then the router should be able to translate to the correct inside address.

as a first attempt you could try to use static NAT statements.

Hope to help

Giuseppe