The MPLS-OPS Archive

Cell Relay Retreat>MPLS-OPS Archive>month:2001-Sep> msg00041



[Date Prev][Date Next][Thread Prev][Thread Next]  
  [Date Index][Thread Index][Author Index][Subject Index]

Re: nat at the PE

  • From: Sergio Enrech <senrech@siticom.com>
  • Date: Thu, 20 Sep 2001 15:49:06 +0200
  • Cc: "'mpls-ops@mplsrc.com'" <mpls-ops@mplsrc.com>
  • Resent-Date: Thu, 20 Sep 2001 12:05:34 -0400
  • To: "'javier.antich@telindus.es'" <javier.antich@telindus.es>
  • X-MIME-Autoconverted: from quoted-printable to 8bit by host.secure4-hosting.net id f8KDnmM07001

Javier,

How is possible to have 1 single router for several VPN using the same
private adresses ?  I dont see how the separation is done, unless having 1
physical interface by VPN.  could you explain more in detail your idea?

Thanks,

 Sergio 




>It is not possible to do NAT at the PE but it is possible to have a >single
>router acting as CE for all the VPNs (not a CE per VPN but only one CE >for
>all or a set of VPNs) which does NAT for each of the VPNs regardless the
>IP
>addressing used (that is, even with overlapping addresses). It is not the
>best solution, but it is cheap.
>
>
>
>
>                                          ^   ^
>==============ooo====(.)v(.)====ooo=====
>Javier Antich Romaguera
>Network Consultant
>------------------------------------------------------------------------->-
-
>TELINDUS 
>Pza. Ciudad de Viena, 6-2º
>28040 Madrid 
>---------------------------------------------------------------------------
>javier.antich@telindus.es
>tel: +34 91 456 00 08
>fax: +34 91 536 10 74
>---------------------------------------------------------------------------
>For more information about our products and services,
>please visit our website http://www.telindus.com
>---------------------------------------------------------------------------
>
>Full connectivity & mobility
>==================ooo0===0ooo========



> -----Mensaje original-----
> De:	Robert Staats [SMTP:rstaats@icnt.net]
> Enviado el:	miércoles 19 de septiembre de 2001 19:47
> Para:	'alfred zhang'; mpls-ops@mplsrc.com
> Asunto:	RE: nat at the PE
> 
> We have been asking Cisco for this functionality for more than a year.  As
> far as we can ascertain it is not even on the roadmap for IOS.  We have
> had
> no luck in getting Cisco to implement this.
> 
> Bob
> 
> Robert Staats
> VP of Engineering
> InternetConnect
> 20770 Madrona Ave.
> Torrance, CA 90505
> (310) 974-2868 Phone
> (310) 974-2022 Fax
> 
> 
> -----Original Message-----
> From: alfred zhang [mailto:alfred.zhang@u-cyber.com]
> Sent: Wednesday, September 19, 2001 1:25 AM
> To: mpls-ops@mplsrc.com
> Subject: nat at the PE
> 
> 
> Hi guys,
> 
>    I'm doing some testing about nat in the mpls vpn .I assumed the ISP
> want 
> to provide internet access to their VPN customers only, with Closed User 
> Group, there can be a public ip address segment that every VPN can access 
> it. Due to IP address issue, NAT is needed somewhere in this public
> segment 
> for each VPN. Can PE do this nat function?Or I have to use CE or one 
> external NAT box.
> 
> 
> Best regards,
> alfred zhang 
> 
> -------
> The MPLS-OPS Mailing List
> Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
> Archive: http://www.mplsrc.com/mpls-ops_archive.shtml
> 
> -------
> The MPLS-OPS Mailing List
> Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
> Archive: http://www.mplsrc.com/mpls-ops_archive.shtml
> 
> 
-------------------------------------------------------- 
Don't miss the 28th Telindus International Symposium on 
Thursday, 25 October 2001, Brussels Expo, Belgium.
Check out the programme and register now for free: 
http://www.telindussymposium.com 
--------------------------------------------------------


-------
The MPLS-OPS Mailing List
Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
Archive: http://www.mplsrc.com/mpls-ops_archive.shtml

-------
The MPLS-OPS Mailing List
Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
Archive: http://www.mplsrc.com/mpls-ops_archive.shtml