Re: NAT Config

Hi,

I tried by changing the config as follows. But still no luck..

!
access-list 101 deny ip host 10.1.8.8 222.22.2.0 0.0.0.255
access-list 101 deny ip host 10.1.8.8 220.20.3.0 0.0.0.255
access-list 101 deny ip host 10.1.8.8 10.1.7.0 0.0.0.255
access-list 101 deny ip host 10.1.8.8 10.1.17.0 0.0.0.255
access-list 101 deny ip host 10.1.8.8 192.10.1.0 0.0.0.255
access-list 101 deny ip host 10.1.8.8 205.90.31.0 0.0.0.255
access-list 101 deny ip 10.1.68.0 0.0.0.255 222.22.2.0 0.0.0.255
access-list 101 deny ip 10.1.68.0 0.0.0.255 220.20.3.0 0.0.0.255
access-list 101 deny ip 10.1.68.0 0.0.0.255 10.1.7.0 0.0.0.255
access-list 101 deny ip 10.1.68.0 0.0.0.255 10.1.17.0 0.0.0.255
access-list 101 deny ip 10.1.68.0 0.0.0.255 192.10.1.0 0.0.0.255
access-list 101 deny ip 10.1.68.0 0.0.0.255 205.90.31.0 0.0.0.255
access-list 101 deny ip 34.1.0.0 0.0.255.255 34.1.0.0 0.0.255.255
!

route-map NAT permit 10
 match ip address 101
!
route-map NAT permit 20
!

basically I should not need "access-list 101 deny ip 34.1.0.0 0.0.255.255
34.1.0.0 0.0.255.255" since I am mentioning vrf here. But could't figure
whats issue here?

Regards,
John

Blogs and organic groups at http://www.ccie.net
Received on Fri Aug 20 2010 - 19:47:28 ART