NAT Cisco ISR

[RS19]

Attached is the diagram for reference.

Existing network setup is shown in blue color. I have L2 Switch -> L3 Swtich -> Gateway rotuer (ISR)

The Gateway router is connected to Internet.

Gateway Router:

Gi1/0 on LAN side which is configured for NAT inside

Gi0/0 is configured for NAT outside

NAT pool is configured to nat my LAN segment (10.10.10.0/24) -> Public IP Address pool in GWY router

This works fine.

I want to achieve the below. Planning to setup the devices in blue.

Want to do similar NAT for another network 192.168.100.0/24

Want to use another interface in Gateway router say Gi1/1 as NAT inside interface & use the same NAT pool.

NAT both 10.10.10.0/24 & 192.168.100.0/24 -> Public IP Address pool in GWY router

Let me know if this is possible.

Can i use 2 Interface as NAT inside & 1 NAT outside interface & use command NAT pool to NAT?

Let me know if this is possible ?

[balaji.bandi]

yes as long as routing in place, the NAT should work for you.

[RS19]

Thanks, Yes routing will be available.

So I can have 2 NAT inside interface & 1 NAT outside interface and use common pool for NAT

[balaji.bandi]

yes you can have them as many as you want, make sure you add the new subnet in to Group to NAT.

[paul driver]

Hello

---

@RS19 wrote:

Thanks, Yes routing will be available.

So I can have 2 NAT inside interface & 1 NAT outside interface and use common pool for NAT

---

Yes you can
example:

access-list 10 remark inside_lan
access-list 10 permit 192.168.10.0 0.0.0.255
access-list 10 permit 192.168.20.0 0.0.0.255

ip nat pool NAT 1.1.1.1 1.1.1.2 prefix-length 30
ip nat inside source list 10 pool NAT

[Seb Rupik]

Hi there,

The short answer is yes. Depending on how you have implemented your NAT statement, either add a new route-map condition or a new ACE to the ACL referenced in the your NAT statement.

If you share your NAT configuration we can fill in the blanks.

cheers,

Seb.

[Vishnu Vardhan S]

Yes you can use 2 interface as for NAT inside.

Can somebody answer is there any limitation on number of NAT inside interace.

I recommend you to use NVI interface to avoid entering NAT inside command on all the interfaces. NVI is not a new way of doing NAT; it’s a new feature to resolve NAT restriction. Checkout below lik for the document.

[RS19]

Where is the link ?