Hi All,
Got a bit of a problem that I'm trying to over-come. Maybe I'm approaching this problem from the wrong stand-point, but to be honest this is a bit beyond my knowledge level and I'm struggling a bit!
I've got a 2821 router, with two "public" connections from two seperate ISPs. I've put each connection into a seperate VRF, and left the global table as our internal address space. So, in brief:
Global Table - 172.21.0.0 255.255.0.0
VRF_ZEN_SDSL - 82.X.X.168 255.255.255.248
VRF_BTNET_FIBRE - 194.X.X.160 255.255.255.224
I've create a couple of IPSEC tunnels, with the tunnel interface originating in the Global table, and the tunnel using source interfaces in each of the VRFs. This works, ospf talks across the tunnels, traffic flows, and all is well.
However... I'm stuck with it comes to NAT. I'm trying to do general NATing for addresses in the global table (172.21....) to an address in the ZEN vrf (say, 82.X.X.174), and also static NATing for ports to makes services on 172.21 addresses available at an IP in the BT vrf. (Exchange OWA, HTTP and SSL etc for example).
Firstly, am I making this far too complicated, and secondly, can anyone point me in the right direction to making this work? Most of the literature out there deals with NATing addresses from within the VRF to an IP in the global table, whereas I'm trying to achieve the opposite!
Many Thanks for any help/advise in advance.
Regards,
Rupes
