cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
807
Views
1
Helpful
6
Replies

Destination NAT on ISR4431 Router

troyfreddy
Level 1
Level 1

Hi

I am trying to configure a cisco ISR router to NAT the destination of an internal IP to a 3rd party providers IP Address.

Background: We have hit a bug on our Meraki platform where Meraki Insights will not target a public address  which is routed over a private link to a 3rd party Voice provider. Meraki does not look at the routing table, it automatically tries to route to the public IP over the WAN interface. To work around this issue we are looking to create a destination NAT (Acting as a VIP) to the voice provider.

Pre NAT:   Source: any          Destination: 10.18.1.1
Post NAT:  Source: any         Destination: 203.100.128.10

Just to note this is a private connection to the destination and both networks can route directly between each other which needs to stay as is. The reason we need to create a destination on an internal IP is to get around a bug in another platform.

I have done this many times with a juniper SRX and want to replicate this functionality with an ISR if it is possible.

Thanks in Advance

6 Replies 6

Ip nat inside destination <<- this command I think what you need 

I did try that .. but couldnt seem to get it to work.. Do you have a full config that i could test ?

Sure draw your topology here and I will share lab how to config İp nat inside destination. 

Here is the lab I have built to test this:

Network Diagram.png 

Screenshot (864).pngScreenshot (865).png

Hello
Based on what your OP and topology
R2
ip route 10.18.1.1 255.255.255.255 fa0/0 10.18.0.5
ip route 10.18.1.2 255.255.255.255 fa0/0 10.18.0.5

R1
ip route 0.0.0.0 0.0.0.0 fa0/0 10.18.0.6
access-list 10 permit 10.30.0.0 0.0.0.255
ip nat inside source list 10 interface fa0/0 overload
ip nat outside source static 203.100.128.10 10.18.1.1
ip nat outside source static 203.100.128.11 10.18.1.2


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul