02-23-2024 07:39 AM
I have a SG350x-48P that I have turned L3 on. I have 4 VLANS that all have 172.16.15.0/26 and DHCP Pools for each. They all hand out IP addresses on their respective interface that have the vlan membership. I have one connection to and ASR1001 and a. /29 network address assigned as the default gateway. From the 350 I can ping the internet without issue as long as the source isn't one of the 4 "gateways". I can NOT ping outside the 350 from my PC getting an 172.16.15.10 address. (it's gateway is the .1)
Can anyone help me with this? I have no way of changing the config on the ASR.
Solved! Go to Solution.
02-23-2024 07:45 AM
Hello @pgreen ,
>> I have no way of changing the config on the ASR.
unfortunately , you would need the following :
on ASR 1001:
static routes for the 4 subnets on the switch with next-hop the switch IP address on their direct link
and changes to NAT on the ASR 1001 to make source NAT happens for hosts in those 4 IP subnets.
NAT is not supported on switches so your other option is to add a router on the path between switch and ASR that will do NAT for your 4 subnets.
Hope to help
Giuseppe
02-23-2024 07:47 AM
SG350x-48P - is the switch does not do any NAT
all subnet need to be NAT on ASR - is this took place ?
You need to have device in between ASR and Switch does the NAT for you to work your expected setup.
02-23-2024 07:45 AM
Hello @pgreen ,
>> I have no way of changing the config on the ASR.
unfortunately , you would need the following :
on ASR 1001:
static routes for the 4 subnets on the switch with next-hop the switch IP address on their direct link
and changes to NAT on the ASR 1001 to make source NAT happens for hosts in those 4 IP subnets.
NAT is not supported on switches so your other option is to add a router on the path between switch and ASR that will do NAT for your 4 subnets.
Hope to help
Giuseppe
02-23-2024 07:48 AM
Thanks!
02-23-2024 07:47 AM
SG350x-48P - is the switch does not do any NAT
all subnet need to be NAT on ASR - is this took place ?
You need to have device in between ASR and Switch does the NAT for you to work your expected setup.
02-23-2024 07:49 AM
Thanks for that.
02-23-2024 07:50 AM
Hello @pgreen ,
you should configure NAT/PAT on the SG350 for all 4 vlans that have 172.16.15.x IP addresses (inside) to the IP address you are using on the interface connecting to ASR1001.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide