This touches a problem I am currently working on. I need to access services in one VPN from multiple other VPNs.
I read in the ftnatvpn doc this: "Inside VPN to VPN with NAT is not supported." Since it is necessary that different VPNs can access the services from one VPN; using NAT will be probably be required. So does anyone have any pointers on how to go about this? Cheers, Jan -----Oorspronkelijk bericht----- Van: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Namens Derick Winkworth Verzonden: vrijdag 10 oktober 2008 14:09 Aan: [email protected] >> Cisco NSP Onderwerp: Re: [c-nsp] Fwd: NAT in VRF http://www.cisco.com/en/US/docs/ios/12_3t/12_3t14/feature/guide/gtnatvi.html http://www.cisco.com/en/US/docs/ios/12_2t/12_2t13/feature/guide/ftnatvpn.htm l Here are two different ways to do what you are asking for, I hope! Gary Roberton wrote: > Thanks Luan > > Can anyone else confirm this also? > > Thanks > > On Thu, Oct 9, 2008 at 2:04 PM, Luan Nguyen <[EMAIL PROTECTED]> wrote: > > >> Yes you can. I used to do that with 2 VRF-Lites on 2 DMVPN tunnels. >> Platform doesn't make any different. >> >> >> Luan Nguyen >> Chesapeake NetCraftsmen, LLC. >> www.NetCraftsmen.net >> >> >> -----Original Message----- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of Gary Roberton >> Sent: Thursday, October 09, 2008 7:28 AM >> To: [email protected] >> Subject: [c-nsp] Fwd: NAT in VRF >> >> ---------- Forwarded message ---------- >> From: Gary Roberton <[EMAIL PROTECTED]> >> Date: Wed, Oct 8, 2008 at 10:13 AM >> Subject: NAT in VRF >> To: "[email protected]" <[email protected]> >> >> >> Can someone please confirm for me that you can have the same IP address in >> different VRFs natted to different destinations. In other words; >> >> 217.1.1.1 nat to 10.1.1.1 in VRF A >> 217.1.1.1 nat to 192.168.1.1 in VRF B >> >> I can't see any reason why not. >> >> What about if using VRF-Lite on a 3845, does that make any difference? >> >> Its a funny question but I have been asked this and have no access to the >> kit to prove it working and I have to have a solid answer. >> >> Thanks. >> >> Gary >> _______________________________________________ >> cisco-nsp mailing list [email protected] >> https://puck.nether.net/mailman/listinfo/cisco-nsp >> archive at http://puck.nether.net/pipermail/cisco-nsp/ >> >> >> > _______________________________________________ > cisco-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/cisco-nsp > archive at http://puck.nether.net/pipermail/cisco-nsp/ > ------------------------------------------------------------------------ > > > No virus found in this incoming message. > Checked by AVG - http://www.avg.com > Version: 8.0.173 / Virus Database: 270.8.0/1717 - Release Date: 10/9/2008 4:56 PM > > _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
