Hi,
I'm trying to move some static NAT rules from an old Cisco 800 series router to an ISR1100, so moving from IOS to IOS-XE. The ISR1100 has a base license, so no ZBFW. The config has been copied as much as possible from the 800 series, where it worked fine.
The NAT rules I want to move are for forwarding L2TP to an internal VPN server, as well as a couple of web server forwards. There are a number of static NAT rules, of the form
ip nat inside source static udp <internal_IP> 500 <external_IP> 500 extendable
and then a rule for NATing internal clients:
ip nat inside source route-map track-primary-if interface GigabitEthernet0/0/0 overload
Internet access for internal clients works fine, but none of the port forwards work.
I'm sure I've done the same on other IOS-XE units like ISR4321's, but I've hit a blank.
Any help appreciated!
