Re: Stateful NAT and Mapping ID

From: Alexei Monastyrnyi (alexeim@orcsoftware.com)
Date: Fri Oct 12 2007 - 04:47:34 ART


IMO without configuring this it would be impossible for SNAT router to
know which NAT translation rule to use after active HSRP/SNAT router has
moved.

A.

on 10/11/2007 11:47 PM Gregory Gombas wrote:
> Thanks. One final question please...
>
> What is the significance of the mapping id on the ip nat inside source command:
>
> ip nat inside source {route-map name pool pool-name mapping-id
> map-number} [overload]
>
>
> On 10/11/07, Narbik Kocharians <narbikk@gmail.com> wrote:
>> That is only to reference HSRP, so the active router will perform the
>> translation.Because remember that stateful NAT can be configured without
>> HSRP as well.
>>
>>
>> On 10/11/07, Gregory Gombas <ggombas@gmail.com> wrote:
>>> Thanks Narbik.
>>>
>>> But doesn't the redundancy name command put them in the same group? Or
>>> is that only for HSRP?
>>>
>>> Also do you need to configure the same mapping ID on all NAT statements?
>>>
>>> Thanks again,
>>> Greg
>>>
>>> On 10/11/07, Narbik Kocharians <narbikk@gmail.com> wrote:
>>>> Think of it as a group id, and as long as you are a member of that group
>> you
>>>> will get a copy of the translation table. That's if the rest of the
>>>> configuration is done correctly. If you need an example of the
>>>> configuration, let me know and i will send you a lab.
>>>>
>>>>
>>>> On 10/11/07, Gregory Gombas <ggombas@gmail.com> wrote:
>>>>> Can someone please clarify what the function of the Mapping ID is when
>>>>> using stateful NAT?
>>>>>
>>>>> According to the DOC cd:
>>>>>
>>>>> mapping-id map-number - Specifies whether or not the local Stateful
>>>>> NAT (SNAT) router will distribute a particular set of locally created
>>>>> entries to a peer SNAT router.
>>>>>
>>>>> I noticed in the config examples the mapping ID matches on both
>> routers.
>>>>> Also I noticed the mapping ID configured on the ip nat inside source
>>>> command.
>>>>> Does that mean you configure the same mapping ID on all nat statements
>>>>> you want to share with your peer?
>>>>>
>>>>>
>> _______________________________________________________________________
>>>>> Subscription information may be found at:
>>>>> http://www.groupstudy.com/list/CCIELab.html
>>>>>
>>>>
>>>>
>>>> --
>>>> Narbik Kocharians
>>>> CCIE# 12410 (R&S, SP, Security)
>>>> CCSI# 30832
>>>> www.Net-WorkBooks.com
>>
>>
>> --
>>
>> Narbik Kocharians
>> CCIE# 12410 (R&S, SP, Security)
>> CCSI# 30832
>> www.Net-WorkBooks.com
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html



This archive was generated by hypermail 2.1.4 : Fri Nov 16 2007 - 13:11:14 ART