cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
975
Views
0
Helpful
1
Replies

ISR4451-X NAT not working

Not applicable

Hi Guys,

Does anyone have experience configuring Nat on the new ISR's? I have the following setup:

 

LAN --> subinterface on ISR4451X in VRF A --> physical interface on ISR4451X in VRF B --> WAN

 

The LAN sub interface is the 'ip nat inside' interface and the physical WAN facing interface is the 'ip nat outside' interface. No matter how I configure NAT I don't seem to be able to get it to work - I don't ever see any translations or even any hits or misses in the 'sh ip nat statistics' output. 

 

Config is:

ip access-list extended INSIDE

 permit ip x.x.x.x x.x.x.x any

!

ip nat inside source list INSIDE interface gi0/0/2 vrf A overload

int gig0/0/0.100

 ip nat inside

!

int gi0/0/2

ip nat outside

 

Thank you!

 

Adam

1 Reply 1

ciscoservice3
Level 1
Level 1

 Interfaces in your router must located in the same zone. But if you need forward and nat traffic with different zones, you solve this with ZBF. In ZBF create zones and write relationship with zones in different VRF( in both direction ).