VLAN and L2NAT on IE4000

[Arthur_]

Hello and happy new year !

2018 start with 2017 unsolved problem ;)

I have two device who have the same IP, PC1 and Server 2, i can't change it.
So i try to implemente NAT through IE4000.

This is my network:

Server 1 has the address 192.168.1.100, 10.0.3.100 via nat.

Server 2 has the address 10.0.3.2; 192.168.1.2 via nat.
On the switch 3650 "ip routing" is activated.
The 10.0.3.0/24 network is duplicated. Hence the implementation of a NAT.
The 3650-IE400 link is configured in trunk.
All the machines are in switchport access on the switches.

Only Server1 have to communicate with Server2.

If 3650 use default configuration and IE4000 this configuration, NAT work.

l2nat instance LABO
outside from host 192.168.1.100 to 10.0.3.100
inside from host 10.0.3.2 to 192.168.1.2
!
interface gi 1/1
l2nat LABO
!

But VLAN aren't implemented yet....

When i configure VLAN on 3650 and IE4000, VLAN works but NAT configuration is no longer applies :/ .

Thanks for your help

[Georg Pauwen]

Hello,

what do you mean with "Vlans are not implemented' ? What exactly is not working when you configure the l2nat ?

Post the full configs of both devices if possible...

[Arthur_]

When i configure l2nat without vlan Server1 can ping Server2 on 192.168.1.2 (and Server2 can ping Server 1 on 10.0.3.100) but i can't have my two device with same ip.
When i add vlan configuration on switchs same ping failed but i can have my two device with same ip.

I try to add vlan without change l2nat configuration , not work.

I try to add vlan and update l2nat configuration like that:

interface gi 1/1
l2nat LABO
l2nat LABO 192
l2nat LABO 4

not work.

[Arthur_]

Configuration File

[Arthur_ · Accepted solution]

#IE4000 configuration
hostname IE4000

l2nat instance LABO
inside from host 192.168.1.4 to 10.0.3.4
inside from host 192.168.1.100 to 10.0.3.100
outside from host 10.0.3.2 to 192.168.1.2
exit

interface gi 1/1
switchport mode trunk
switchport trunk allowed vlan 192
exit

interface gi 1/2
switchport acces vlan 192
l2nat LABO
exit

interface gi 1/3
switchport acces vlan 192
exit

I remove VLAN4 and push VLAN4 device on VLAN192, this configuration work.