cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
4141
Views
0
Helpful
4
Replies

IP nat inside source command with : match-in-vrf

croue
Level 1
Level 1

Hi,

What is the explanation of the option " match-in-vrf" in the command ip nat inside source?

Because nothing is explain on the CCO.

router(config)#ip nat inside source list TEST pool POOL_TEST vrf VRF_TEST ?

match-in-vrf Match incoming vrf

overload Overload an address translation

<cr>

4 Replies 4

aghaznavi
Level 5
Level 5

The match-in-vrf keyword is missing from the ip nat inside source command, and the ip nat inside source command is not accepted at all in interface-configuration mode. This symptom is observed on a Cisco 7200 series that runs Cisco IOS interim Release 12.4(11.6a) or interim Release 12.4(12.03)T but may also affect other routers.

csco10387876
Level 1
Level 1

the match in vrf allow you to have the same translation in two distinct vrf

so that you can have something like

ip nat inside source a.a.a.a b.b.b.b vrf a match-in-vrf

ip nat inside source a.a.a.a b.b.b.b vrf b match-in-vrf

but this feature is, as far as I know, only working for a vrf-lite config.

knagavol
Cisco Employee
Cisco Employee

Javier Teliz (jtelisbr)
Cisco Employee
Cisco Employee

The Match-in-VRF Support for NAT feature supports Network Address Translation (NAT) of packets that communicate between two hosts within the same VPN routing and forwarding (VRF) instance. In intra-VPN NAT, both the local and global address spaces for end hosts are isolated to their respective VPNs, and as a result, the translated addresses for the hosts overlap each other. The Match-in-VRF Support for NAT feature helps separate the address space for translated addresses among VPNs.

 

In summary:

! The match-in-vrf keyword enables NAT inside and outside traffic in the same VRF.
! The match-in-VRF Support for NAT feature helps separate the address space for translated addresses among VPNs.

 

https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/ipaddr_nat/configuration/xe-2/nat-xe-2-book/iadnat-match-vrf.html

Review Cisco Networking products for a $25 gift card