Re: RE: NAT in vrf

Thanks, unfortunately
adding ip nat outside to LO 0 did not change anything, still no translation

Below the config

R5#sh run
version 12.4
!
hostname R5

ip cef
!
!
ip vrf XYZ
 rd 131.5.5.5:19
 route-target export 131.5.5.5:9
 route-target import 131.5.1.1:1
!

mpls label protocol ldp
!
!
interface Loopback0
 ip address 131.5.5.5 255.255.255.255
 ip nat outside
 ip virtual-reassembly
!
interface FastEthernet0/0
 ip vrf forwarding XYZ
 ip address 172.16.5.5 255.255.255.0
 ip nat inside
 ip virtual-reassembly
 duplex auto
 speed auto
!
!
interface Serial0/1/0
 ip unnumbered Loopback0
 ip virtual-reassembly
 encapsulation ppp
 mpls ip
!
router bgp 5
 no bgp default ipv4-unicast
 bgp log-neighbor-changes
 neighbor 131.5.1.1 remote-as 1234
 neighbor 131.5.1.1 ebgp-multihop 3
 neighbor 131.5.1.1 update-source Loopback0
 neighbor 131.5.4.4 remote-as 1234
 !
 address-family ipv4
  neighbor 131.5.4.4 activate
  neighbor 131.5.4.4 send-community both
  no auto-summary
  no synchronization
  network 131.5.5.5 mask 255.255.255.255
 exit-address-family
 !
 address-family vpnv4
  neighbor 131.5.1.1 activate
  neighbor 131.5.1.1 send-community both
 exit-address-family
 !
 address-family ipv4 vrf XYZ
  redistribute connected
  no synchronization
 exit-address-family
!
ip forward-protocol nd
ip route 131.5.1.1 255.255.255.255 131.5.4.4
ip route vrf XYZ 131.5.9.9 255.255.255.255 131.5.4.4 global
!
ip bgp-community new-format
!
ip http server
no ip http secure-server
ip nat inside source list 155 interface Loopback0 vrf XYZ overload
!
ip access-list standard VLAN5
 permit 172.16.5.0 0.0.0.255
!
access-list 155 permit ip host 172.16.5.5 host 131.5.9.9
!
route-map VLAN5 permit 10
 match ip address VLAN5
!
!
mpls ldp router-id Loopback0
!
!
control-plane
!
line con 0
 exec-timeout 0 0
line aux 0
line vty 0 4
 login
!
scheduler allocate 20000 1000
!
end

On Fri, Aug 20, 2010 at 4:59 PM, Fabian Pucciarelli <fabiangp_at_gmail.com>wrote:

> Add Nat out on the l0 interface
>
> On Aug 20, 2010 12:16 AM, "Pornthep_CCIE" <pornthep.ccie_at_gmail.com> wrote:
> > Rd, Rt , have assign ?
> >
> > -----Original Message-----
> > From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of
> > selamat pagi
> > Sent: Friday, August 20, 2010 12:43 PM
> > To: Cisco certification
> > Subject: NAT in vrf
> >
> > I try to translate the source in vrf XYZ (172.16.5.5) to the loopback 0
> to
> > reach R9.
> > On R9 the packets arrive, but they still have the untranslated source
> > 172.16.5.5 and not 131.5.5.5.
> >
> > What do I miss here ?
> >
> > thanks, keti
> >
> > R5
> > interface Loopback0
> > ip address 131.5.5.5 255.255.255.255
> >
> > interface FastEthernet0/0
> > ip vrf forwarding XYZ
> > ip address 172.16.5.5 255.255.255.0
> > ip nat inside
> > !
> > interface Serial0/1/0
> > ip unnumbered Loopback0
> > ip nat outside
> > encapsulation ppp
> > mpls ip
> >
> > ip route vrf XYZ 131.5.9.9 255.255.255.255 131.5.4.4 global
> >
> > ip nat inside source list 155 interface Loopback0 vrf XYZ overload
> > access-list 155 permit ip host 172.16.5.5 host 131.5.9.9
> >
> > R5
> > p vrf XYZ 131.5.9.9
> > Sending 5, 100-byte ICMP Echos to 131.5.9.9, timeout is 2 seconds:
> > ....
> >
> > R9
> > Aug 20 05:44:21.867: ICMP: echo reply sent, src 131.5.9.9, dst 172.16.5.5
> > *Aug 20 05:44:23.867: ICMP: echo reply sent, src 131.5.9.9, dst
> 172.16.5.5
> >
> >
> >
> > R5#sh ip nat translations
> >
> > R5#sh ip nat translations vr
> > R5#sh ip nat translations vrf XYZ
> >
> > R5#
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Fri Aug 20 2010 - 17:39:16 ART