Hi,
I'm trying to use some combination of route-maps and / or ACLs to write a destination-based NAT policy that would essentially do the following:
Take any source address of 10.x.x.x/8 and if it is going to (list of subnets) than NAT to (host IP) and overload
I can get the destination-based NATing to work if I specify a static source and a static destination, but not if the source and destination are either summary nets or made up of a collection of subnets (say from a prefix list or ACL)
Is this possible?
Example of what is working fine
!ip nat inside source (some Inside Local IP) (some Outside Global IP) route-map (permit 10 match ip address extended ACL)
ip nat inside source static 10.0.0.1 35.34.33.32 route-map NONRFC1918