Static PAT in VRF IOS-XE 4000 series ISR

[rjmanthey@babcock.com]

What I am needing to do is do a static PAT to a global IP. The outside interface and inside sub-interface are VRF aware. The non-VRF networks are not natted it is all sent over a VPN.

I am just not sure if i use:

ip nat inside static tcp a.b.c.d 443 w.x.y.z 443

I would think i needed to reference the vrf.

[Reza Sharifi]

Yes, vrf name can be added to the statment.

ip nat inside static tcp a.b.c.d 443 w.x.y.z 443 vrf <vrf name>

HTH

[Georg Pauwen]

Hello,

if both the inside and the outside interface are in the same vrf (as I understand they are from your description) the below should be applicable:

ip nat inside static tcp a.b.c.d 443 w.x.y.z 443 vrf vrf-name match-in-vrf