06-01-2023 08:48 AM
I have a scenario where I need to NAT a 10.0.0.0 /24 network coming into my routers tunnel 1 interface to a single IP and have yet been successful in doing so unless I do nat overload and define the tunnel 1 interface as ip nat inside and then my gi 0/0/0 as ip nat outside, basically reversing how it is normally done.
I have a site to site IPSec VPN on my router, interface tunnel 1. The remote end has a private network of 10.0.0.0 /24 that needs to come inbound on tunnel 1 and into my network. The problem is 10.0.0.0 /24 overlaps with existing networks so I need to NAT it to preferably a single IP, the IP of interface gi 0/0/0.
What is the proper way to do this on a ISR 4431? Thank you.
06-01-2023 08:49 AM
are you ISR4431 accept ip nat enable command ?
06-01-2023 09:02 AM
Yes this is a ISR4431 and the "ip nat enable" command is available under a interface.
06-04-2023 04:05 AM
Hello
can you post a topology diagram ?
06-01-2023 11:34 AM
I was able to add "ip nat enable" to both of the interfaces involved but I am not sure how to write the NAT command to translate 10.0.0.0 /24 coming into interface tunnel 1 to a single IP. The inside interface is gi 0/0/0 and I can have the translated source be the IP of this interface or a IP from it's scope of 10.50.50.0 /24.
Everything that I have tried so far has failed.
06-04-2023 01:31 AM
My Howtos and Projects: Cisco - NAT Overload on the Loopback (exit with different Public IP)
this way we use LO with IP nat enable to NATing all traffic to LO IP
06-03-2023 12:21 AM
Hello
Can you post a topology diagram to make it clearer as what you are trying to achieve?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide