03-03-2022 12:54 PM
I have a customer VRF and an Internet VRF on my router. I need to route some traffic from customer VRF to internet and in order to do this I will have to nat the customer vrf traffic going to internet to "Internet" vrf and do a NAT overload. Is this possible? If yes, does anyone has a working configuration lines for this setup? I looked and all I see is VRF to GLOBAL nat configurations. Please share if anyone knows how to achieve vrf to vrf NAT overload. Thanks!
03-03-2022 01:07 PM
03-03-2022 02:57 PM - edited 03-03-2022 03:23 PM
Hello
Add a default to the lan vrf and enable domainless nat (no inside/outside) and as domainless nat performs a route lookup before and after translation it should work -review example below:
example
ip vrf net
ip vrf lan
int gig0/1
description lan facing
ip vrf forwarding lan
192.168.1.1 255.255.255.0
ip nat enable
int gig0/0
description net facing
ip vrf forwarding net
1.1.1.1 255.255.255.252
ip nat enable
access-list 1 permit 192.168.1.0 0.0.0.255
ip nat source list 1 interface gig0/0 1.1.1.2
ip route vrf lan 0.0.0.0 0.0.0.0 gig 0/0 1.1.1.2
sh ip nat nvi translations vrf lan
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide