VRF-Lite and NAT between vrf

Unanswered Question
Mar 1st, 2010
User Badges:

I have two VRF. The first-one connected to Internet, the second-one to an inside LAN with private ip and NAT.

All works but, if I take away the green line, dns resolution doesn't work, every else is ok (tcp, ssh, icmp...). So I need to have two default gateway like in this configuration.

Can you tell me why? I tried this with old and new release of IOS (this is 15.1)





!

ip vrf reteesterna

rd 1000:100

route-target export 1200:120

route-target import 1201:121

!

ip vrf reteinterna

rd 1001:101

route-target export 1201:121

route-target import 1200:120

!

!

!

interface FastEthernet0/0

description --- rete interna ---

ip vrf forwarding reteinterna

ip address 192.168.88.1 255.255.255.0

ip nat enable

duplex auto

speed auto

!

interface FastEthernet0/1

description --- rete esterna ---

ip vrf forwarding reteesterna

ip address 82.85.14.104 255.255.255.224

ip nat enable

duplex auto

speed auto

!

router bgp 222

no synchronization

bgp log-neighbor-changes

no auto-summary

!

address-family ipv4 vrf reteesterna

  no synchronization

  network 82.85.14.96 mask 255.255.255.224

exit-address-family

!

address-family ipv4 vrf reteinterna

  no synchronization

  network 192.168.88.0

exit-address-family

!


!

ip nat pool INTERNET 82.85.14.104 82.85.14.104 netmask 255.255.255.224

ip nat source list 112 pool INTERNET vrf reteinterna overload

ip route vrf reteesterna 0.0.0.0 0.0.0.0 82.85.14.97

ip route vrf reteinterna 0.0.0.0 0.0.0.0 82.85.14.97

!

access-list 112 permit ip 192.168.88.0 0.0.0.255 any

access-list 114 permit ip any any

!

!



regards

Gianrico Fichera

ITESYS SRL

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
Giuseppe Larosa Fri, 03/05/2010 - 01:41
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

Hello Gianrico,


if you remove the red default static route do you still see a default route in VRF retetinterna?


because there is no redistribute static under BGP VRF address families so I'm surprised that only  DNS does not work when from VRF reteinterna you try to access internet.


For the way you have configured your device both default static routes should be needed.


Hope  to help

Giuseppe

Actions

This Discussion