OK, to make sure I am not doing anything unsupported (route-map with VRF and NVI), I have removed ip nat enabled and back to ip nat inside/outside domains. I can say my all problems mentioned in very first post are solved. I post working configuration here, I hope this can help someone else to solve the similar problem. Thanks and good luck.
used HW: cisco 2691
used IOS: c2691-advipservicesk9-mz.124-15.T4.bin
configuration:
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
!
hostname ce
!
boot-start-marker
boot-end-marker
!
logging buffered 4096
no logging console
enable password test
!
no aaa new-model
memory-size iomem 5
ip cef
!
ip vrf local
rd 0:0
route-target export 0:0
route-target import 0:0
route-target import 100:1
route-target import 200:1
!
ip vrf p1e
rd 100:1
route-target export 100:1
route-target import 100:1
route-target import 200:1
route-target import 0:0
!
ip vrf p2e
rd 200:1
route-target export 200:1
route-target import 200:1
route-target import 100:1
route-target import 0:0
!
no ip domain lookup
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
!
multilink bundle-name authenticated
!
username cco password 0 test
archive
log config
hidekeys
!
track 1 rtr 1
!
interface Tunnel1
description VPN to R via P1E
ip vrf forwarding local
ip address 10.214.0.6 255.255.255.248
ip mtu 1416
ip ospf cost 1000
tunnel source FastEthernet0/0
tunnel destination 6.6.6.2
tunnel path-mtu-discovery
tunnel vrf p1e
!
interface Tunnel2
description VPN to R via P1E
ip vrf forwarding local
ip address 10.215.0.6 255.255.255.248
ip mtu 1416
ip ospf cost 2000
tunnel source FastEthernet0/1
tunnel destination 6.6.6.2
tunnel path-mtu-discovery
tunnel vrf p2e
!
interface FastEthernet0/0
ip vrf forwarding p1e
ip address 1.1.1.11 255.255.255.0
ip nat outside
speed 100
full-duplex
!
interface FastEthernet0/1
ip vrf forwarding p2e
ip address 2.2.2.22 255.255.255.0
ip nat outside
speed 100
full-duplex
!
interface FastEthernet1/0
ip vrf forwarding local
ip address 10.10.10.1 255.255.255.0
ip nat inside
speed 100
full-duplex
!
router ospf 1 vrf local
ispf
log-adjacency-changes
passive-interface default
no passive-interface Tunnel1
no passive-interface Tunnel2
network 10.10.10.1 0.0.0.0 area 0
network 10.214.0.6 0.0.0.0 area 0
network 10.215.0.6 0.0.0.0 area 0
!
router bgp 65535
bgp router-id 10.10.10.1
no synchronization
bgp log-neighbor-changes
no auto-summary
!
address-family ipv4 vrf p2e
redistribute connected
redistribute static
no synchronization
exit-address-family
!
address-family ipv4 vrf p1e
redistribute connected
redistribute static
no synchronization
exit-address-family
!
address-family ipv4 vrf local
redistribute connected
redistribute static
no synchronization
exit-address-family
!
no ip forward-protocol nd
ip route vrf local 0.0.0.0 0.0.0.0 1.1.1.1 track 1
ip route vrf local 0.0.0.0 0.0.0.0 2.2.2.1 2
ip route vrf p1e 0.0.0.0 0.0.0.0 1.1.1.1
ip route vrf p2e 0.0.0.0 0.0.0.0 2.2.2.1
!
no ip http server
no ip http secure-server
ip nat inside source route-map nat-p1e interface FastEthernet0/0 vrf local overload
ip nat inside source route-map nat-p2e interface FastEthernet0/1 vrf local overload
ip nat inside source static tcp 10.10.10.10 23 1.1.1.11 23 vrf local extendable
ip nat inside source static tcp 10.10.10.10 23 2.2.2.22 23 vrf local extendable
!
ip access-list extended nat-p1e
permit ip host 10.10.10.10 any
ip access-list extended nat-p2e
permit ip host 10.10.10.10 any
!
ip sla 1
icmp-echo 3.3.3.1 source-ip 1.1.1.11
timeout 3000
vrf p1e
frequency 10
ip sla schedule 1 life forever start-time now
!
route-map nat-p2e permit 10
match ip address nat-p2e
match interface FastEthernet0/1
!
route-map nat-p1e permit 10
match ip address nat-p1e
match interface FastEthernet0/0
!
control-plane
!
line con 0
line aux 0
line vty 0 4
login local
line vty 5 15
login local
!
end
