how PAT not working on cisco router?

[Herman2018]

hi, I am trying to config PAT on the router SAC01, configured the nat as shown below. IP address translation happened when I ping the external server ip with the source IP 10.10.1.1- interface g0/0 of SAC01, but when ping from VPC, then NAT is not working. the source ip doesn't translated. Can someone please help advise why it doesn't work? I test on eve-ng, Thanks in advance! 

Config on SAC01

int g0/0

ip add 10.10.1.1 255.255.255.0 

ip nat inside

int g0/1

ip addr 10.20.1.1 255.255.255.0

ip nat outside

ip nat inside source list 1 interface GigabitEthernet0/1 overload

access-list 1 permit any

config on VPC

IP Address: 10. 10.1.10 255.255.255.0 ,gateway 10.10.1.1

can ping the gateway IP ( the ip address of SAC01 interface g0/0)

[M02@rt37]

Hello @Herman2018 

Enable debug to check NAT in action:

debug ip nat

[MHM Cisco World]

How router config as CoreSW??

MHM

[Herman2018]

Thanks M02@rt37  for your response, on the core switch, just configured the ports G0/0 and G0/2 to the same vlan (access vlan), I ca@n ping 10.10.1.1(SAC01 interface G0/0) from VPC. 

Thanks @MHM Cisco World for your advice, I have turn on debug , there is no output and nat table is empty. But when I ping to external server with the source IP 10.10.1.1 (local interface ), then can see the source IP is translated to external interface IP. I also turned on debug ip icmp on the server, the source IP is still VPC when ping from VPC. 

thanks @Scott Leport for your advice, I think the routing should be correct. For VPC, the gateway is 10.10.1.1 (SAC01 interface G0/0), and there is static route for the outbound traffics on SAC01. 

[M02@rt37]

Please

Enable debug to check NAT in action:

debug ip nat

[MHM Cisco World]

I ask about coreSW if it L3 device then traffic not reach NATing device 

MHM

[Scott Leport]

Hi, 

I just labbed up something very similar in EVE-NG and NAT translation works as expected for me. Assuming static routing here, make sure that your routing end-to-end is good. 

[paul driver]

Hello
try the following:

SAC01
conf t
no access-list 1 
access-list 1 permit 10.10.1.0 0.0.0.255
ip route 0.0.0.0 0.0.0.0 gig0/1 10.20.1.x <next hop interface ip>