Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Static NAT policy (static NAT with ACL) with VRF


I must connect two same network ( These networks are behind a firewall and a Cisco router 2811. The Cisco router 2811 implement VRF.

I would like implement static NAT on the two devices to allow the bidirectionnal communication between the two networks.

For this I use the NATed network and

On the firewall, I implemented a static rule policy nat, which translate the source address in address WHEN PC try to communicate with the subnet

I would like perform the same with the subnet However, I don't find how to perform a static NAT policy, on the VRF galere. I don't want use the global routing table.

Here the ASA rule, that I want to convert on the Cisco router, can you help me

Static (in,out) access-list 100

Access-list 100 permit ip ??

A screenshot of the architecture is in this post.

Thank you in advance for your help.




Static NAT policy (static NAT with ACL) with VRF

See the bellow example where you can use ACL for policy nat

You replace the. Interface with nat pool you create

Hope this help

New Member

Static NAT policy (static NAT with ACL) with VRF

Thank you marwanshawi for this link !

Are you sure, the NAT pool allow to perform static NAT ? The communication could be bidirectionnal ?

I wish the PC with IP in LAN A talk with the PC in LAN B. When I use the destination

The same with, 12, 13...

In the option of the NAT in the router I can use also use route-map.

I saw that proxy ARP must be implemented in this post

Thank you


Static NAT policy (static NAT with ACL) with VRF

Its better to check what nat option with vrf your platform support and try it since you are aware about the logic

Network nat can be used or if you have only few hots to be translated you can use static translation per host

CreatePlease login to create content