NAT的match-in-vrf功能介绍

最新推荐文章于 2024-05-03 15:11:20 发布

wunderup

最新推荐文章于 2024-05-03 15:11:20 发布

阅读量3.5k

点赞数

分类专栏： Networking 文章标签： NAT VRF

本文链接：https://blog.csdn.net/wunderup/article/details/38439227

版权

1. inside接口在VRF green1， outside接口在VRF green1，测试如下

如果没有match-in-vrf的话，那么ip alias中就没有该globa地址的entry，自然无法响应arp了。

ASR1013-2#sh run vrf green1
Building configuration...

Current configuration : 515 bytes
vrf definition green1
 !
 address-family ipv4
 exit-address-family
 !
 address-family ipv6
 exit-address-family
!
!
interface GigabitEthernet0/0/0
 vrf forwarding green1
 ip address 90.1.0.1 255.255.255.0
 ip nat outside
 load-interval 30
 negotiation auto
 cdp enable
!
interface GigabitEthernet0/0/1
 vrf forwarding green1
 ip address 100.100.100.1 255.255.255.0
 ip nat inside
 load-interval 30
 negotiation auto
 cdp enable
ip nat inside source static 100.100.100.142 90.1.0.14 vrf green1 match-in-vrf
!
!
end

ASR1013-2#show ip alias
Address Type             IP Address      Port
Interface                10.74.9.121 
Interface                90.1.0.1 
Dynamic                  90.1.0.14 
Interface                100.100.100.1 
Interface                192.168.1.2 
ASR1013-2#conf t
Enter configuration commands, one per line.  End with CNTL/Z.
ASR1013-2(config)#no ip nat inside source static 100.100.100.142 90.1.0.14 vrf green1 match-in-vrf
ASR1013-2(config)#ip nat inside source static 100.100.10