10-14-2021 09:32 AM - edited 10-14-2021 09:33 AM
Hi everyone,
I always appreciate the support of Cisco community.
We need to connect the networks with the same network address to L3 switch (Catalyst 9300) to communicate with the destination server. Also, the communication between Network A and B must be prohibited.
We thought that it would be possible to implement by utilizing the NAT and VRF of C9300. I would like to tell you how to configure network.
First, Network A is connected to the Port 1, and Network B is connected to the Port 3. Then, we try to change the IP address of Network A as shown in the table below by means of NAT.
No. | Inside | Outside |
1 | 192.168.1.5 | 192.168.3.5 |
2 | 192.168.1.6 | 192.168.3.6 |
3 | 192.168.1.7 | 192.168.3.7 |
4 | 192.168.1.8 | 192.168.3.8 |
Next, we build connection between Port 2 and 4, and configure VRF as below to prevent communication between Network A and Network B.
- VRF 1 Routing Table
Network number | Outbound Interface | Next hop |
192.168.3.0/24 | Fa0/4 | 10.10.0.5 |
- VRF 2 Routing Table
Network number | Outbound Interface | Next hop |
192.168.1.0/24 | Fa0/3 | 10.10.0.5 |
The detailed connection is shown in the picture below.
Like this, I wonder if there is any problem with configuring the network I said.
The answers from experts would be very helpful for me. Thank you very much indeed!
10-14-2021 09:44 AM
As remember you already open thread with this information, we have addressed most of the issue there.
In Terms of NAT, Cat 9300 is switch (most case it may not do NAT, some execptional case as per the document) and read the releae notes and License required to do NAT.
10-14-2021 10:06 AM
Thank you for your answer. I haven't been able to solve this problem and trying to find a solution. The link below showed that the Catalyst 9300 supports NAT.
https://www.reddit.com/r/Cisco/comments/aupo7k/catalyst_9300_switches_support_nat_on_1610x/
10-14-2021 11:35 AM
yes the above document show you how to configure NAT on cat 9300, just focus on the requirement (make sure you have correct License to make the config work)
10-14-2021 02:33 PM - edited 10-14-2021 02:34 PM
I've already read the release notes you said. As you know, we cannot find an answer to my question in there. Is it impossible to answer my question? If so, I will wait until other expert answer.
10-14-2021 04:49 PM
have you got a chance to review the suggestion done on the last post?
10-15-2021 02:55 AM - edited 10-15-2021 02:56 AM
Hello
I suggested a solution to this in duplicate post by yourself here
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide