From: Kemal YILDIRIM (kemalhy@gmail.com)
Date: Fri Jun 30 2006 - 18:19:06 ART
Hi Jens,
1- static routes is not allowed otherwise specifically stated.
2- access-list 2 permit 192.168.1.0 will not match inside hosts.
access-list 2 permit 192.168.1.0 0.0.0.255 will match inside hosts
You can create a loopback interface that has the NAT address and advertise
it in to BGP with network command. NAT translation can be done to loopback
interface and also can be overloded.
Regards
interface Loopback0
ip address 172.16.1.10 255.255.255.255
!
interface Ethernet0/0
ip address 192.168.1.1 255.255.255.0
ip nat inside
!
interface Serial0/1
ip address 172.16.1.1 255.255.255.252
ip nat outside
!
router bgp 1
network 172.16.1.10 mask 255.255.255.255
neighbor 172.16.1.2 remote-as 2
no auto-summary
!
ip nat inside source list 2 interface Loopback0 overload
!
access-list 2 permit 192.168.1.0 0.0.0.255
Objects are what is unalterable and subsistent;
their configuration is what is changing and unstable.
So, you need PRACTICE, PRACTICE, AND MORE PRACTICE...
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Jens
Petter
Sent: Friday, June 30, 2006 10:58 PM
To: ccielab@groupstudy.com
Subject: advertising NAT pool in to BGP
I am trying to figure out how to advertise a NAT configured pool in to bgp..
Will this do the job ? :
interface fastethernet 1
ip address 172.16.1.x 255.255.255.252
ip nat outside
router bgp 1
neighbor 10.1.1.1 remote-as 2
redistribute static route-map STATIC-TO-BGP
access-list 1 permit 172.16.1.10
access-list 2 permit 192.168.1.0
route-map STATIC-TO-BGP
match ip address 1
ip nat pool NAT-POOL 172.16.1.10 172.16.1.10 PREFIX 30
ip nat inside source list 2 pool NAT-POOL overload
ip route 172.16.1.10 255.255.255.255 null 0
172.16.1.10 is my nat pool address that I am overloading for my inside
addresses... This is the NAT address I need to advertise in to BGP so that
external host have a route back... I tried to use /32 as prefix in the ip
nat pool command but got an error telling me that /30 is the smalest prefix
I can use... Is this a problem..? the outside interface are /30 net
Will this advertising of that NAT address work well. I dont have a lab to
test this, so any advice will be apreaciated... Any other advices is alo
apreachiated..
Jens
This archive was generated by hypermail 2.1.4 : Sat Jul 01 2006 - 07:57:34 ART