The MPLS-OPS Archive

Cell Relay Retreat>MPLS-OPS Archive>month:2002-May> msg00208



[Date Prev][Date Next][Thread Prev][Thread Next]  
  [Date Index][Thread Index][Author Index][Subject Index]

Re: NAT for MPLS VPN

  • From: "Cynthia Conesa Martinez/Inf-Pronet" <Cynthia@inf-pronet.com>
  • Date: Wed, 29 May 2002 00:51:50 +0200
  • Cc: mpls-ops@mplsrc.com
  • Resent-Date: Tue, 28 May 2002 19:56:50 -0400
  • To: "Duane de Witt" <ddewitt@uis.co.za>
  • X-MIME-Autoconverted: from quoted-printable to 8bit by host.secure4-hosting.net id g4SMhVm29042
  • X-MIMETrack: Serialize by Router on commerce/Inf-Pronet(Version 5.0.2c (Esp.)|8 febrerodel 2000) at 05/29/2002 12:51:53 AM


I tested sucessfully a similar configuration, with the help of Javier. The
basic idea is separate the VPNs into VLAN and inject them in NAT router.
There, you must use some kind of policy routing to translate the addresses.

If there is interest, I can put here the configs, or I can give a FTP
address to request full doc, with graphics and so on.

Best regards,
   Francisco Sedano.




                                                                                                                   
                    "Duane de                                                                                      
                    Witt"                Para:   <mpls-ops@mplsrc.com>                                             
                    <ddewitt@uis.        cc:                                                                       
                    co.za>               Asunto:      [MPLS-OPS]: NAT for MPLS VPN                                 
                                                                                                                   
                    28/05/2002                                                                                     
                    17:33                                                                                          
                                                                                                                   
                                                                                                                   



While we are on the subject I need to configure something similar but have
no idea how to go about it.





I have a Cisco network, currently with tag-switching running but with no
VPN's. I have a 7140 which is been used as the gateway for the network
which has a link to a 7200 handling my internet connections. Currently the
7140 has a default route pointing to the internet router, this route is
redistributed by BGP for the rest of my network.





When I add VPN's with VRF's I face a problem. I need the current default
gateway to stay as is for the rest of the network, but I also need some
kind of default gateway for the specific VRF and then I need to be able to
get those packets out of the VPN and to the internet. I was planning on
using the 7140 with some kind of NAT config with subinterfaces on the
gateway within the VRF as the inside interface and then the interface
connecting to the internet router as the outside interface. I don't know
how to get the packets out of the VRF and on to the internet router.





Has anyone got any ideas?








Regards





Duane de Witt


Siemens Business Services


Tel. +27 11 652 7613


Fax. +27 11 652 2018










-------
The MPLS-OPS Mailing List
Subscribe/Unsubscribe:  http://www.mplsrc.com/mplsops.shtml
Archive: http://www.mplsrc.com/mpls-ops_archive.shtml