NAT and BGP

wgranada1 · ‎03-30-2007

Good day;

I need some advice, I have a BGP route that goes through a provider which connects me to a customer. I'm required to statically NAT my addresses to the provider's IP address to reach my customer. Below is what I have configured will this work or am I doing something wrong?

ip nat inside source static 192.168.11.19 170.132.237.49

ip nat inside source static 192.168.11.37 170.132.237.50

ip nat inside source static 192.168.11.22 170.132.237.51

ip nat inside source static 192.168.11.40 170.132.237.52

ip nat inside source static 192.168.11.42 170.132.237.53

ip nat inside source static 192.168.11.24 170.132.237.54

ip nat inside source static 192.168.11.20 170.132.237.55

ip nat inside source static 192.168.10.62 170.132.237.56

ip nat outside source static 170.132.237.49 192.168.11.19

ip nat outside source static 170.132.237.50 192.168.11.37

ip nat outside source static 170.132.237.51 192.168.11.22

ip nat outside source static 170.132.237.52 192.168.11.40

ip nat outside source static 170.132.237.53 192.168.11.42

ip nat outside source static 170.132.237.54 192.168.11.24

ip nat outside source static 170.132.237.55 192.168.11.20

ip nat outside source static 170.132.237.56 192.168.10.62

then all I need to do is add this to the BGP interface both in and out?

Thank you in advance

royalblues · ‎03-30-2007

Which addresses you want to advertise to the provider?

Narayan

wgranada1 · ‎03-30-2007

I think I'm making this more harder than it has to be. I have to advertise the 170.132.237.48/28 to him so it is going to be a one to one static nat so it will be:

ip nat inside source static 192.168.11.19 170.132.237.49

ip nat inside source static 192.168.11.37 170.132.237.50

ip nat inside source static 192.168.11.22 170.132.237.51

ip nat inside source static 192.168.11.40 170.132.237.52

ip nat inside source static 192.168.11.42 170.132.237.53

ip nat inside source static 192.168.11.24 170.132.237.54

ip nat inside source static 192.168.11.20 170.132.237.55

ip nat inside source static 192.168.10.62 170.132.237.56

so all I would really have to do is apply this to the interface as a ip nat out right?

royalblues · ‎03-30-2007

I lost you here..

Where do you have the problem... Is it with BGP or NAT..

Can you post th network topology

Narayan

wgranada1 · ‎03-30-2007

sorry the NAT the way it goes is

rt4 - my router

fur - providers router

ffrt1 - destination router

rt4 --> fur --> ffrt1

I need to NAT my 192.168.11.0 subnet to 170.132.237.0/28 subnet

I think I'm making this more difficult than it needs to be. Anyways what I'm trying to accomplish is trying to static nat the above ip addresses. So I'm thinking all I need to do is apply the static routes to the interface as ip nat out and just make sure I add to my prefix-list the 170.132.237.0/28 subnet so once it is translated it knows how to get to the distant end. Sorry I think I just confused myself....sounds good or am I still confusing myself? But I'm doing a static route from 192.168.11.0 to 170.132.237.0:

ip nat inside source static 192.168.11.19 170.132.237.49

ip nat inside source static 192.168.11.37 170.132.237.50

ip nat inside source static 192.168.11.22 170.132.237.51

ip nat inside source static 192.168.11.40 170.132.237.52

ip nat inside source static 192.168.11.42 170.132.237.53

ip nat inside source static 192.168.11.24 170.132.237.54

ip nat inside source static 192.168.11.20 170.132.237.55

ip nat inside source static 192.168.10.62 170.132.237.56

royalblues · ‎03-30-2007

The Nat statements looks fine.

All you need to take care is that the prefix which you advertise in BGP should be there in the routing table too.

Regards

Narayan

wgranada1 · ‎03-30-2007

Thanks guys sorry I confused myself and you all to thanks for getting me straight!!!!

Even if it looks like you didn't help you actually helped out a lot thank you!!!!!