Tuesday, September 1, 2020

Default leak from front door VRF to GRT - NAT overload

A bit stumped on this. I've gotten this to work with VRF to VRF plenty of times, but in this scenario I'd like to do VRF to GRT. Does this config look right? This is IOS-XE (CSR1000v) in GNS3

This is all local to one router, all referenced interfaces are UP and the default route gateway is pingable (I have another router holding that IP that is connected)

ip vrf INTERNET_A rd 1:1 route-target export 1:1 export ipv4 unicast map DEFAULT_ONLY route-map DEFAULT_ONLY permit 10 match ip address prefix-list DEFAULT_ONLY ip prefix-list DEFAULT_ONLY seq 10 permit 0.0.0.0./0 ip route vrf INTERNET_A 0.0.0.0 0.0.0.0 12.45.78.90 router bgp 65001 address-family ipv4 vrf INTERNET_A redistribute static default-information originate exit address-family show ip route B* 0.0.0.0/0 [20/0] via 12.45.78.90, 00:05:00 show ip route vrf INTERNET_A S* 0.0.0.0/0 [1/0] via 12.45.78.90 ip nat inside source list acl-nat-out int gi6 vrf INTERNET_A overload ip access-list extended acl-nat-out 10 permit ip any any int gi6 ip vrf forwarding INTERNET_A ip address 12.45.78.89/30 ip nat outside int gi1 ip address 172.16.0.22/30 ip nat inside ping 12.45.78.90 (this is the next hop, so NAT should process) timeout show ip nat translations Total number of translations: 0 show ip nat translations vrf INTERNET_A Total number of translations: 0 


No comments:

Post a Comment