Re: RE : NVI interface

From: Eric Bratager (ebratager@yahoo.com)
Date: Thu Nov 03 2005 - 11:08:10 GMT-3


The following link has some good info on the NVI.

http://www.cisco.com/en/US/products/sw/iosswrel/ps5207/products_feature_guide09186a008041d91a.html

NAT Virtual Interface Feature Design
The NAT Virtual Interface feature allows all NAT
traffic flows on the virtual interface, eliminating
the need to specify inside and outside domains. When a
domain is specified, the translation rules are applied
either before or after route decisions depending on
the traffic flow from inside to outside or outside to
inside. The translation rules are applied only after
the route decision for an NVI.

When a NAT pool is shared for translating packets from
multiple networks connected to a NAT router, an NVI is
created and a static route is configured that forwards
all packets addressed to the NAT pool to the NVI. The
standard interfaces connected to various networks will
be configured to identify that the traffic originating
and receiving on the interfaces needs to be
translated.

--------------------------------------------------------------------------------

Note NVI is not a new way of doing NAT; it's a new
feature to resolve NAT restriction.

--- Richard Dumoulin <Richard.Dumoulin@vanco.fr>
wrote:

> I see but what for?
>
> -----Message d'origine-----
> De : kgannon@gmail.com [mailto:kgannon@gmail.com] De
> la part de kevin gannon
> Envoyi : jeudi 3 novembre 2005 14:58
> @ : Richard Dumoulin
> Cc : ccielab@groupstudy.com
> Objet : Re: NVI interface
>
> Nat virtual interface its a new feature.
>
> Regards
> Kevin
>
> On 11/3/05, Richard Dumoulin
> <Richard.Dumoulin@vanco.fr> wrote:
> > Has anyone noticed that in recent IOSs the router
> creates an NVI 0
> interface
> > when static NAT is configured?
> >
> > NVI0 unassigned YES
> unset up
> > up
> >
> > Router#sh ip nat ?
> > nvi NVI information
> > statistics Translation statistics
> > translations Translation entries
> >
> > IOS version is c1841-advipservicesk9-mz.124-1a.bin
> >
> > Anyone knows what it is for?
> >
> > Regards
> >
> > -- Richard
> >
> >
> >
> >
> >
>
**********************************************************************
> > Any opinions expressed in the email are those of
> the individual and not
> necessarily the company. This email and any files
> transmitted with it are
> confidential and solely for the use of the intended
> recipient. If you are
> not the intended recipient or the person responsible
> for delivering it to
> the intended recipient, be advised that you have
> received this email in
> error and that any dissemination, distribution,
> copying or use is strictly
> prohibited.
> >
> > If you have received this email in error, or if
> you are concerned with the
> content of this email please e-mail to:
> e-security.support@vanco.info
> >
> > The contents of an attachment to this e-mail may
> contain software viruses
> which could damage your own computer system. While
> the sender has taken
> every reasonable precaution to minimise this risk,
> we cannot accept
> liability for any damage which you sustain as a
> result of software viruses.
> You should carry out your own virus checks before
> opening any attachments to
> this e-mail.
> >
>
**********************************************************************
> >
> >
>



This archive was generated by hypermail 2.1.4 : Thu Dec 01 2005 - 09:12:05 GMT-3