Route Map and NAT

[dylan.keys1]

Hi,

Am having some issues getting a route map and NAT working. I have 2 LAN's and a /27 block of public IP address. I need one LAN to use just one of the public IP address and the other LAN to use one of the public IP Address out of the assigned pool.

Bellow is my config, would appreciate any help!

!
interface GigabitEthernet0/0/0
 no ip address
 negotiation auto
 !
!
interface GigabitEthernet0/0/0.60
 description XXX2 LAN
 encapsulation dot1Q 60
 ip address 10.0.60.30 255.255.255.224
 ip nat inside
 ip virtual-reassembly
!
interface GigabitEthernet0/0/0.99
 
 encapsulation dot1Q 99
 ip address 20.x.x.30 255.255.255.224
 ip nat outside
 ip virtual-reassembly
!
interface GigabitEthernet0/0/0.100
 description MANAGEMENT LAN (NO INTERNET ACCESS)
 encapsulation dot1Q 100
 ip address 10.0.100.254 255.255.255.0
!
interface GigabitEthernet0/0/0.152
 
 encapsulation dot1Q 152
 ip address 10.0.152.254 255.255.255.0
 ip nat inside
 ip virtual-reassembly
!
!
ip forward-protocol nd
!
no ip http server
no ip http secure-server
!
ip nat pool XXX2-LAN-POOL 20.x.x.2 20.x.x.29 netmask 255.255.255.224
ip nat pool XXX-LAN-POOL 20.x.x.30 20.x.x.30 netmask 255.255.255.224
ip nat inside source route-map XXX2-LAN-MAP pool XXX2-LAN-POOL
ip nat inside source route-map XXX-LAN-MAP pool XXX-LAN-POOL overload
!
ip access-list extended XXX2-LAN-LIST
 permit ip 10.0.60.0 0.0.0.31 any
 deny   ip any any
ip access-list extended XXX-LAN-LIST
 permit ip 10.0.152.0 0.0.0.255 any
 deny   ip any any
!
!
!
!
!
route-map XXX-LAN-MAP permit 10
 match ip address UIA-LAN-LIST
 match interface GigabitEthernet0/0/0.99
 set ip next-hop 20.x.x.1
!
route-map XXX2-LAN-MAP permit 10
 match ip address ILOBS-LAN-LIST
 set ip next-hop 20.x.x.1

[Evgeniy Prichinin]

set ip next-hop 20.x.x.1

This will not work in this route-map. You should use PBR instead of it to set ip next-hop.

[dylan.keys1]

So I have applied a separate route-map to the LAN interface that sets the next-hop.

This has not made a difference though.

Any Ideas?

[Evgeniy Prichinin]

You don't need an route-maps, just replace

ip nat inside source route-map XXX2-LAN-MAP pool XXX2-LAN-POOL
ip nat inside source route-map XXX-LAN-MAP pool XXX-LAN-POOL overload

with 

ip nat inside source list XXX2-LAN-LIST pool XXX2-LAN-POOL
ip nat inside source list XXX-LAN-LIST interface GigabitEthernet0/0/0.99 overload

[paul driver]

Hello

Try the following:

route-map XXX-LAN-MAP permit 10
 match ip address UIA-LAN-LIST
 match interface GigabitEthernet0/0/0.99
 set ip next-hop 20.x.x.1

route-map XXX2-LAN-MAP permit 10
 match ip address ILOBS-LAN-LIST
 set ip next-hop 20.x.x.1

ip route 0.0.0.0 0.0.0.0 GigabitEthernet0/0/0.99 20.x.x.1



res
Paul