C9300 Enabling ip routing commands and protocols?

[kapslock]

Hi,

I'm currently deploying a test setup with the zero-touch cisco dna center solution.

For this I have deployed:

2x C9300-24T running L3 CAT9K_IOSXE, Version 16.8.1a.

1x C9200

1x DNACenter

However I am already running into issues. 
I'm sitting behind a private network, and trying to setup NAT on one of the C9300 series, however it seems like I cannot access or use any L3 commands, such as, natting, routing protocols etc.

As far as I am concerned I have to enable routing functions with "ip routing" however that does help.

The switch have following licenes:

Network-advantage 

Dna-advantage

I checked data sheets for C9300 network advantage license and that includes L3 functions.

Currently using sdm template access - I cannot change this? Only option is access.

Any ideas? 
These are L3 switches (C9300) and should be able to do routing right?

[Mark Malone]

Yes 9k can do full routing not sure about NAT though i see it Gibraltar release , its disabled by default but you have already enabled it with ip routing

what does command ..... router ?
show you in config mode , does it show any options when thats ran

[kapslock]

Maybe they need a software update I am not sure about the releases? 

Is this what you're looking for?

Switch(config)#ip routing
Switch(config)#ip r?
radius rcmd route routing
rsvp rtcp rtp 

Switch(config)#router rip
 ^
% Invalid input detected at '^' marker.

Switch(config)#

[Mark Malone]

sorry this exactly below , it will show if IGP routing is available

Switch(config)router ?

[Mark Malone]

You should have basic routing with network advantage , no BGP but definitely stub eigrp and ospf

Switch fundamentals
Layer 2, Routed Access (RIP, EIGRP Stub, OSPF - 1000 routes), PBR, PIM Stub Multicast (1000 routes)), PVLAN, VRRP, PBR, CDP, QoS, FHS, 802.1X, MACsec-128, CoPP, SXP, IP SLA Responder, SSO

[kapslock]

Oh yeah, I've been using wrong syntax whole time lol. Routing protocols are definitely working sorry for the trouble.

Switch(config)#router ?
bgp Border Gateway Protocol (BGP)
eigrp Enhanced Interior Gateway Routing Protocol (EIGRP)
isis ISO IS-IS
iso-igrp IGRP for OSI networks
lisp Locator/ID Separation Protocol
mobile Mobile routes
odr On Demand stub Routes
ospf Open Shortest Path First (OSPF)
ospfv3 OSPFv3
rip Routing Information Protocol (RIP)

However, so it seems it cannot NAT -


Switch(config)#ip nat ?
% Unrecognized command
Switch(config)#ip n?
name-server nbar nsf-converge

Switch(config)#ip

[Mark Malone · Accepted solution]

Ah no thats grand once its sorted :)

NAT on a switch is very new , is see it released in version 16.10 , what are you on ? show version will show you

here it is in gibraltar release (one of the latest) , i have not tested this to confirm does it work though

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-10/configuration_guide/ip/b_1610_ip_9300_cg/configuring_nat.html

[kapslock]

Ok, thats very good information - I thought it was more or less standard supported on all L3 switches.

However my c9300's are running 16.08.01a - that would explain why NAT is not featured.
I will try and upgrade to 16.10.x and see if it can do NAT :)
Thank you very much for helping!

Switch#sh version
Cisco IOS XE Software, Version 16.08.01a
Cisco IOS Software [Fuji], Catalyst L3 Switch Software (CAT9K_IOSXE), Version 16.8.1a, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2018 by Cisco Systems, Inc.
Compiled Tue 03-Apr-18 18:49 by mcpre

[Mark Malone]

Actually its only released on campus switches , most l3 switches couldnt do it , 3ks 2ks,4ks etc , some 65s could with certain modules , these new 9ks im seeing it but i havent used the function as we just use them as switches , if the command , ip nat is not there currently then you cant do it on that switch as it is now , you could try roll up to the latest software and see if its any different if you need to use it as the docs say its supported in gibraltar edition so most likely will be

when i check your version i don't see any NAT commands

https://www.cisco.com/c/en/us/td/docs/switches/lan/catalyst9300/software/release/16-8/configuration_guide/b-168-9300-cg.html

[kapslock]

So I just had some time right now to test the latest gibraltar release and natting definitely works on this version. Thank for the help :)

[Mark Malone]

Thanks for confirming that