The MPLS-OPS Archive

Cell Relay Retreat>MPLS-OPS Archive>month:2001-Sep> msg00051



[Date Prev][Date Next][Thread Prev][Thread Next]  
  [Date Index][Thread Index][Author Index][Subject Index]

RE: nat at the PE

  • From: Javier Antich <javier.antich@telindus.es>
  • Date: Fri, 21 Sep 2001 08:58:22 +0200
  • Cc: "'Robert Staats '" <rstaats@icnt.net>, "''alfred zhang' '" <alfred.zhang@u-cyber.com>, "'mpls-ops@mplsrc.com '" <mpls-ops@mplsrc.com>
  • Resent-Date: Fri, 21 Sep 2001 04:56:22 -0400
  • To: "'Andrew Walker '" <Andrew.Walker@cosinecom.com>, Javier Antich <javier.antich@telindus.es>
  • X-MIME-Autoconverted: from quoted-printable to 8bit by host.secure4-hosting.net id f8L73A005900

I was just talking about Cisco. There is not concept that prevents a PE
router from doing nat.  

-----Original Message-----
From: Andrew Walker
To: Javier Antich
Cc: Robert Staats; 'alfred zhang'; mpls-ops@mplsrc.com
Sent: 20/09/01 15:37
Subject: RE: nat at the PE

I respectfully disagree. 

It IS possible to do NAT at the PE (just not with cisco 
or juniper equipment).  Many carriers are beginning to do just 
that with CoSine equipment.  The IPSX can perform NAT on 
a per-VRF in the network (without burdening the CE and without 
external NAT equipment)! 

Andy 

At 12:33 PM 9/20/2001 +0200, Javier Antich wrote: 
>It is not possible to do NAT at the PE but it is possible to have a
single 
>router acting as CE for all the VPNs (not a CE per VPN but only one CE
for 
>all or a set of VPNs) which does NAT for each of the VPNs regardless
the IP 
>addressing used (that is, even with overlapping addresses). It is not
the 
>best solution, but it is cheap. 
> 
> 
> 
>                                           ^   ^ 
>==============ooo====(.)v(.)====ooo===== 
>Javier Antich Romaguera 
>Network Consultant 
>-----------------------------------------------------------------------
---- 
>TELINDUS 
>Pza. Ciudad de Viena, 6-2º 
>28040 Madrid 
>-----------------------------------------------------------------------
---- 
>javier.antich@telindus.es 
>tel: +34 91 456 00 08 
>fax: +34 91 536 10 74 
>-----------------------------------------------------------------------
---- 
>For more information about our products and services, 
>please visit our website http://www.telindus.com
<http://www.telindus.com>  
>-----------------------------------------------------------------------
---- 
>Full connectivity & mobility 
>==================ooo0===0ooo======== 
> 
> 
> 
> > -----Mensaje original----- 
> > De:   Robert Staats [SMTP:rstaats@icnt.net] 
> > Enviado el:   miércoles 19 de septiembre de 2001 19:47 
> > Para: 'alfred zhang'; mpls-ops@mplsrc.com 
> > Asunto:       RE: nat at the PE 
> > 
> > We have been asking Cisco for this functionality for more than a
year.  As 
> > far as we can ascertain it is not even on the roadmap for IOS.  We
have 
> > had 
> > no luck in getting Cisco to implement this. 
> > 
> > Bob 
> > 
> > Robert Staats 
> > VP of Engineering 
> > InternetConnect 
> > 20770 Madrona Ave. 
> > Torrance, CA 90505 
> > (310) 974-2868 Phone 
> > (310) 974-2022 Fax 
> > 
> > 
> > -----Original Message----- 
> > From: alfred zhang [ mailto:alfred.zhang@u-cyber.com
<mailto:alfred.zhang@u-cyber.com> ] 
> > Sent: Wednesday, September 19, 2001 1:25 AM 
> > To: mpls-ops@mplsrc.com 
> > Subject: nat at the PE 
> > 
> > 
> > Hi guys, 
> > 
> >    I'm doing some testing about nat in the mpls vpn .I assumed the
ISP 
> > want 
> > to provide internet access to their VPN customers only, with Closed
User 
> > Group, there can be a public ip address segment that every VPN can
access 
> > it. Due to IP address issue, NAT is needed somewhere in this public 
> > segment 
> > for each VPN. Can PE do this nat function?Or I have to use CE or one

> > external NAT box. 
> > 
> > 
> > Best regards, 
> > alfred zhang 
> > 
> > ------- 
> > The MPLS-OPS Mailing List 
> > Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
<http://www.mplsrc.com/mplsops.shtml>  
> > Archive: http://www.mplsrc.com/mpls-ops_archive.shtml
<http://www.mplsrc.com/mpls-ops_archive.shtml>  
> > 
> > ------- 
> > The MPLS-OPS Mailing List 
> > Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
<http://www.mplsrc.com/mplsops.shtml>  
> > Archive: http://www.mplsrc.com/mpls-ops_archive.shtml
<http://www.mplsrc.com/mpls-ops_archive.shtml>  
> > 
> > 
>-------------------------------------------------------- 
>Don't miss the 28th Telindus International Symposium on 
>Thursday, 25 October 2001, Brussels Expo, Belgium. 
>Check out the programme and register now for free: 
> http://www.telindussymposium.com <http://www.telindussymposium.com>  
>-------------------------------------------------------- 
> 
> 
>------- 
>The MPLS-OPS Mailing List 
>Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
<http://www.mplsrc.com/mplsops.shtml>  
>Archive: http://www.mplsrc.com/mpls-ops_archive.shtml
<http://www.mplsrc.com/mpls-ops_archive.shtml>  
########################################################################
############################## This email communication may contain
CONFIDENTIAL INFORMATION and is intended only for the use of the
intended recipients identified above.  If you are not the intended
recipient of this communication, you must not use, disclose, distribute,
copy or print this email. If you have received this communication in
error, please immediately notify the sender by reply email, delete the
communication and destroy all copies.
########################################################################
##############################



-------------------------------------------------------- 
Don't miss the 28th Telindus International Symposium on 
Thursday, 25 October 2001, Brussels Expo, Belgium.
Check out the programme and register now for free: 
http://www.telindussymposium.com 
--------------------------------------------------------


-------
The MPLS-OPS Mailing List
Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
Archive: http://www.mplsrc.com/mpls-ops_archive.shtml