cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
245
Views
0
Helpful
0
Replies

Problems with source NAT and PBR

kamil_folga
Level 1
Level 1
Hi!
I have a service on the server's IP address 9x.2x.2x.1x by Tunnel1 from source address 1y.1y.1y.3y. The LAN network is 192.168.0.0/24. I would like to access server 9x.2x.2x.1x from hosts with address 192.168.0.0/24, so I create a route-map PBR which catches access-list ADRES and sent to Loopback0 where is configured SNAT replace source address 192.168.0.0/24 to address 1y.1y.1y.3y. Is this a good idea? In practice does not work. What could be wrong in this configuration?
My config:
!
!
interface Loopback0
 ip address 1y.1y.1y.3y 255.255.255.248
 ip nat outside
 ip virtual-reassembly
!
interface FastEthernet4
 ip address dhcp
 ip nat outside
 ip virtual-reassembly
 duplex auto
 speed auto
!
interface Vlan1
 ip address 192.168.0.1 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 ip policy route-map PBR
!
ip route 9x.2x.2x.1x 255.255.255.255 Tunnel1
!
ip nat inside source list NAT interface Loopback0 overload
!
ip nat inside source list NAT interface FastEthernet4 overload
!
ip access-list extended NAT
 permit ip 192.168.0.0 0.0.0.255 any
!
ip access-list extended ADRES
 permit ip any host 9x.2x.2x.1x
 permit icmp any host 9x.2x.2x.1x
!
route-map PBR permit 10
 match ip address ADRES
 set interface Loopback0
!
Best regards,
Kamil
0 Replies 0