Different nat outside interfacec for different service vpns

[dijix1990]

Can I send traffic from different service vpn through different outside interfaces in the vpn0 

For example

VPN 0
Ge1
ip address 1.1.1.1 255.255.255.0

Ge2
ip address 2.2.2.1 255.255.255.0

VPN 1
Ge3
ip address 192.168.100.1 255.255.255.0

VPN 2 
Ge4
ip address 192.168.100.1 255.255.255.0

vpn1 goes to nat dia through Ge1 (1.1.1.1/24)

vpn2 goes to nat dia through Ge2 (2.2.2.1/24)

[Kanan Huseynli · Accepted solution]

Hi,

yes, you can do it with centralized data policy. Within two different "traffic rules/ traffic data" policy (central data policy) match respective traffic pattern and as action choose both following options: NAT VPN and Local-tloc. Local-tloc will be outside transport interface (which is in VPN0) tunnel tloc color. You need two "traffic rules/ traffic data" policy, because it will be applied to 2 different VPNs (from service to tunnel side).

https://www.cisco.com/c/dam/en/us/td/docs/solutions/CVD/SDWAN/sdwan-dia-deploy-2020aug.pdf

See page 24 SD-WAN Single-Router Dual Internet Remote-Site Design section. By the way, document has below information:

Techical Tip: On IOS XE SD-WAN routers, the traffic can be forwarded to the NAT interfaces based on ECMP, as path preference is
not yet supported on these router platforms 

However, I've checked it works in IOS XE new version. I tested on C8000V 17.9.1 version.

[dijix1990]

Very thanks