Re: NAT in PE (OT)

From: Daniel Kratz <dkratz_at_gmail.com>
Date: Thu, 29 Dec 2011 10:57:30 -0200

Hi Bernard,

I not sure if a NAT box is need for your scenarios. Appears to me that if
you dont have too much traffic to be translated you may use NAT - VRF
Aware NAT feature... Basically your LSR will work as PE router and will
impose the label to the leaked packets. [1]

In the past I worked with a solution for managed services vpn where the
management station was in the global table. The connection was provided
throughNAT - VRF Aware NAT. I can try helping you in troubleshooting

We run into some of IOS issues with dCEF. Another issue that we run into
was NAT asymmetry when complex vpn are in place. The packet out into one
vrf and back in another....

Regards,
Kratz

[1] - Cisco IOS NAT - Integration with MPLS VPN
http://www.cisco.com/en/US/tech/tk648/tk361/technologies_white_paper09186a008
0b40929.shtml

2011/11/21 Bernard Steven <buny.steven_at_gmail.com>

> Forgot to ask the bloody question i wanted to ask... (-:
>
> WIll nat on a stick a solution for this ? This is a production network ,
> not exam. Real life experience will be valuable , also marked as OT.
> (-:
>
>
>
> On Mon, Nov 21, 2011 at 10:06 AM, Bernard Steven <buny.steven_at_gmail.com
> >wrote:
>
> > Guys,
> > Is there a way to do a nat between a vrf interface and traffic coming
> from
> > an LDP enabled interface towards the core ?
> > I am trying to NAT in a PE.One interface is towards a CE and the other
> > interface is towards the P router.,
> >
> > The device does not support NVI , also vrf aware nat does not seem to
> > help.
> >
> > My problem is it does not make sense to put an ip nat inside / outside
> > statement in the interface towards the PE.
> > Any thoughts ?
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

--
"Any fool can know. The point is to understand."
                                                Albert Einstein
Blogs and organic groups at http://www.ccie.net
Received on Thu Dec 29 2011 - 10:57:30 ART

This archive was generated by hypermail 2.2.0 : Sun Jan 01 2012 - 08:27:01 ART