HSRP with Static NAT

Unanswered Question
Oct 1st, 2009

Hi,


we had a NAT router deployed on our network for insdide server to access from outside


To have hardware redunancy we planned to deploy the HSRP between the existing and the new router


but i heard that HSRP and NAT will not work together so i refered some cisco document and its says we can configure HSRP with static NAT


when i tried in my router there is no command as same


Cisco commands:



interface BVI10

ip address 192.168.5.54 255.255.255.255.0

no ip redirects

ip nat inside

standby 10 priority 105 preempt

standby 10 name HSRP1

standby 10 ip 192.168.5.30

standby 10 track Ethernet2/1

!

!

ip default-gateway 10.0.18.126


when i try on my router its says invalid input


RTR_GSL2-2(config)#$de source static 192.168.5.33 3.3.3.5 redundancy HSRP1

ip nat inside source static 192.168.5.33 3.3.3.5 redundancy HSRP1

^

% Invalid input detected at '^' marker.


can anyone suggest


router A :

System image file is "flash:c3640-i-mz.122-46a.bin"


IOS (tm) 3600 Software (C3640-I-M), Version 12.2(46a), RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2007 by cisco Systems, Inc.


Router B:


System image file is "flash:c3640-is-mz.122-5.bin"


IOS (tm) 3600 Software (C3640-IS-M), Version 12.2(5), RELEASE SOFTWARE (fc1)

Copyright (c) 1986-2001 by cisco Systems, Inc.

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Giuseppe Larosa Thu, 10/01/2009 - 12:22

Hello Vinoth,

I see the two routers have different IOS images.

is the command supported on the one with the newer image?.


In release 12.4 (but I don't know if you can install it on your C3640) there is stateful NAT that is more advanced feature available now.


With stateful NAT the two devices keep an updated NAT translation table so that if second router has to take active role it is ready to process current flows.


the feature you are trying to use is older and should miss this capability to exchange state information.


for stateful NAT see


http://www.cisco.com/en/US/products/ps6640/products_white_paper09186a0080118b04.shtml


Hope to help

Giuseppe


vinoth.kumar Wed, 10/07/2009 - 05:32

Thanks for your reply


I have upgraded the IOS and configured the NAT with the HSRP


everything looks fine and also standby state but


when i connect with the LIVE the NAT which i applied to the Secondary IP of the outside interface working fine


but not the NAT deployed to the Primary IP


can u suggest us any issue config


when i try to check the arp entry in the backbone router its shows the different mac ID


and also when i roll back the config without the HSRP its working fine






Attachment: 

Actions

This Discussion