Cisco Nexus 3548 Configuration Manual page 130

Configuring VRF Aware NAT
DETAILED STEPS
Command or Action
Step 1 switch# configure terminal
Step 2 switch(config)# [no] ip nat inside | outside source list
ACL_NAME [interface INTERFACE NAME overload
][pool POOL NAME overload ] [group group-id]
[dynamic] [ vrf <vrf-name> [match-in-vrf] ]
Step 3
switch(config)# [no] ip nat inside | outside source static
LOCAL IP GLOBAL IP | [tcp | udp LOCAL IP LOCAL
PORT GLOBAL IP GLOBAL PORT ] [group group-id]
[dynamic] [ vrf <vrf-name> [match-in-vrf] ]
Step 4 switch(config)# interface type slot/port [ vrf <vrf-name ip
nat inside | outside
See the output of show run nat command.
#show run nat
....
feature nat
ip nat inside source static 1.1.1.1 1.1.1.100 vrf red match-in-vrf
ip nat outside source static 2.2.2.200 2.2.2.2 vrf red match-in-vrf add-route
ip nat inside source list nat-acl-in1 pool pool-in1 vrf red match-in-vrf overload
ip nat outside source list nat-acl-out1 pool pool-out1 vrf red match-in-vrf add-route
interface Ethernet1/3
ip nat outside
interface Ethernet1/5
ip nat inside
N3548#show ip nat translation verbose
Pro Inside global
any 1.1.1.1
icmp 101.1.0.1:65351
udp 101.1.0.1:65383
tcp 101.1.0.1:64549
Cisco Nexus 3548 Switch NX-OS Interfaces Configuration Guide, Release 9x
120
Inside local
10.1.1.2
Flags:0x1 Entry-id:0
101.0.0.1:0
Flags:0x82 Entry-id:101
101.0.0.1:63
Flags:0x82 Entry-id:103
101.0.0.1:8809
Flags:0x82 Entry-id:102
syn:0:1:9 fin-rst:12:0:9
Purpose
Enters global configuration mode.
Creates or deletes dynamic NAT with VRF specific.
The group keyword determines the group to which a
translation belongs.
Creates or deletes a VRF specific static NAT.
The group keyword determines the group to which a
translation belongs.
Enables NAT on a VRF-aware interface.
Outside local
---
State:0x0 Group_id:0 Format(H:M:S) Time-left:0:0:-1
102.1.0.1:231
State:0x3 Group_id:0 VRF: red Format(H:M:S) Time-left:12:0:9
102.1.0.1:63
State:0x3 Group_id:0 VRF: red Format(H:M:S) Time-left:12:0:9
102.1.0.1:9087
State:0x1 Group_id:0 VRF: red Format(H:M:S) Time-left:12:0:9
Configuring Static and Dynamic NAT Translation
Outside global
---
102.1.0.1:231
102.1.0.1:63
102.1.0.1:9087