cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1781
Views
0
Helpful
2
Replies

NAT on ASR 1001-X routers

MARTIN HUERTER
Level 1
Level 1

We have two redundant/diverse internet connections to our campus network. We do NAT/PAT/one-to-many NAT at our borders and we are installing new ASR 1001-X routers. Can anyone tell me if the ASR 1001-X routers have a way of sharing NAT tables or syncing NAT state with each other? There maybe occasions where packets may egress on one connection through ASR (1), but arrive or ingress on the "other" ASR (2) and a NAT record would be needed on ASR (2) in order for it to forward the packet back to it's originator. If they can do it, can you also give me some reference documentation on how to do it. I can't seem to find anything about this scenario.

 

Thanks!

 

2 Replies 2

Julien thomas
Level 1
Level 1

Hello Martin,

Did you finally manage to solve this issue?

I have the exact same scenario and i struggle to find anything helpfull and simple... 

 

Thanks & have a nice day :)

 

Julien

Jerome BERTHIER
Level 1
Level 1

Hi

I think that what you're looking for on ASR is called Box-to-Box-NAT High Availability (B2B NAT HA).

It permits to sync NAT states between a cluster of ASR.

There is a scenario to deal with asymetric routing (which is your main concern):

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/15-mt/nat-15-mt-book/iadnat-b2b-ha.html#concept_34C7E91AB8964AADA06C2C4F9FF3667F

Regards