I cannot get NAT working between an inside and outside interface that are part of the same VRF. I cannot use a NAT pool because I am using a DSL modem that only allows one public IP address. The outside interface is ethernet, and the inside interface is a tunnel. Here is my configuration:
ip vrf PUBLIC
!
ip inspect log drop-pkt
ip inspect name LOCALFW tcp
ip inspect name LOCALFW udp
!
interface Tunnel0
ip vrf forwarding PUBLIC
ip address 172.24.1.1 255.255.255.252
ip nat inside
no ip virtual-reassembly
tunnel source Loopback0
tunnel destination 10.145.3.3
!
interface FastEthernet0/0
ip vrf forwarding PUBLIC
ip address 65.41.216.177 255.255.255.224
ip nat outside
ip inspect LOCALFW in
no ip virtual-reassembly
duplex auto
speed auto
!
ip route vrf PUBLIC 0.0.0.0 0.0.0.0 65.41.216.161
ip route vrf PUBLIC 172.24.2.0 255.255.255.224 172.24.1.2
!
access-list 10 permit 172.24.2.0 0.0.0.31 log
!
ip nat source list 10 interface FastEthernet0/0 vrf PUBLIC overload
!
access-list 10 permit 172.24.2.0 0.0.0.31 log
#sho ip nat statistics
Total active translations: 0 (0 static, 0 dynamic; 0 extended)
Outside interfaces:
FastEthernet0/0
Inside interfaces:
Tunnel0
Hits: 0 Misses: 0
CEF Translated packets: 0, CEF Punted packets: 0
Expired translations: 0
Dynamic mappings:
-- Outside Destination
[Id: 5] access-list 10 interface FastEthernet0/0 refcount 0
Appl doors: 0
Normal doors: 0
Queued Packets: 0
Does anyone have any ideas why NAT is not working?
Thanks for your help.
Bill Anderson
Technical Services Group
Supporting the Department of Economic Development
Information Technology Services Division
State of MO Office of Administration
