NAT on C6816-X-LE VSS

[john.pepper]

Hi,

Having problems with NAT on 2 x C6816-X-LE switches running VSS.  IOS = 15.2(2)SY3

Not seeing any NAT translations between private users on Vlan172 network to Vlan182.

Config below is fairly basic. Only difference is it's using in a VRF.  And I've noticed that the 'match-in VRF' command is not available in this IOS.

Any help much appreciated.

interface Vlan172
vrf forwarding prod
ip address 172.16.0.1 255.255.255.0
ip nat inside

interface Vlan182
vrf forwarding prod
ip address 10.1.1.1 255.255.255.0
ip nat outside

ip nat pool POOL1 10.1.1.40 10.1.1.249 prefix-length 24
ip nat inside source list 10 pool POOL1 vrf prod
access-list 10 permit 172.16.0.0

[Georg Pauwen]

Hello,

typically within a vrf you would need the 'match-in-vrf' at the end of the NAT statement:

ip nat inside source list 10 pool POOL1 vrf prod match-in-vrf

Not sure if this is available on the 6816...

[john.pepper]

Hi Georg,

Many thanks for the reply.  Unfortunately, that command isn't there in this IOS.