cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
879
Views
0
Helpful
3
Replies

How to Configure Static NAT in ACE?

limtohsoon
Level 1
Level 1

Hi Sir,

Below is an excerpt of CSM config:

module ContentSwitchingModule 5

!

static nat 202.188.1.60

real 172.21.5.60

static nat 202.188.1.61

real 172.21.5.61

!

serverfarm SFARM1

nat server

no nat client

predictor leastconns

real 172.21.5.60

inservice

real 172.21.5.61

inservice

probe ICMP_PROBE

!

Can you kindly advise how to configure the equivalent static NAT in ACE module?

I refer to the following ACE config guide:

http://www.cisco.com/en/US/docs/interfaces_modules/services_modules/ace/v3.00_A1/configuration/security/guide/nat.html#wp1021624

However I still can't understand how to configure it. Using the CSM to ACE Conversion Tool available in ACE, it classifies the NAT commands as Unsupported CSM command.

Please help.

Thank you.

B.Rgds,

Lim TS

3 Replies 3

Gilles Dufour
Cisco Employee
Cisco Employee

Lim,

you need to create a class-map for each real.

ie:

class-map real1

match source-address 172.21.5.60 255.255.255.255

Then create a policy-map for the static nat.

policy-map multimatch NatReal

class-map real1

nat static 202.188.1.60 netmask 255.255.255.255 vlan

class-map real2

nat static ....

Then apply the policy-map on the server vlan

interface vlan X

service-policy in NatReal

tadaaaaa !

That's it.

Gilles.

Hi Gilles,

Thanks for your reply! I understand it now. You've been very helpful in answering several of my other posts.

Will try the config next week.

Thank you.

B.Rgds,

Lim TS

Hi Gilles,

Your suggested configs work in my production network!

Just some minor typo error:

policy-map multimatch NatReal

class ...

Thank you.

B.Rgds,

Lim TS

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: