cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1169
Views
0
Helpful
6
Replies

NAT outside many to 1

NetworkZero
Level 1
Level 1

I have a scenario where I need to NAT a 10.0.0.0 /24 network coming into my routers tunnel 1 interface to a single IP and have yet been successful in doing so unless I do nat overload and define the tunnel 1 interface as ip nat inside and then my gi 0/0/0 as ip nat outside, basically reversing how it is normally done.

I have a site to site IPSec VPN on my router, interface tunnel 1.  The remote end has a private network of 10.0.0.0 /24 that needs to come inbound on tunnel 1 and into my network.  The problem is 10.0.0.0 /24 overlaps with existing networks so I need to NAT it to preferably a single IP, the IP of interface gi 0/0/0.

What is the proper way to do this on a ISR 4431?  Thank you.

6 Replies 6

are you ISR4431 accept ip nat enable command ? 

Yes this is a ISR4431 and the "ip nat enable" command is available under a interface.

Hello
can you post a topology diagram ?


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul

I was able to add "ip nat enable" to both of the interfaces involved but I am not sure how to write the NAT command to translate 10.0.0.0 /24 coming into interface tunnel 1 to a single IP.  The inside interface is gi 0/0/0 and I can have the translated source be the IP of this interface or a IP from it's scope of 10.50.50.0 /24.

Everything that I have tried so far has failed.

My Howtos and Projects: Cisco - NAT Overload on the Loopback (exit with different Public IP)

this way we use LO with IP nat enable to NATing all traffic to LO IP 

Hello
Can you post a topology diagram to make it clearer as what you are trying to achieve?


Please rate and mark as an accepted solution if you have found any of the information provided useful.
This then could assist others on these forums to find a valuable answer and broadens the community’s global network.

Kind Regards
Paul