1. inside接口在VRF green1, outside接口在VRF green1,测试如下
如果没有match-in-vrf的话,那么ip alias中就没有该globa地址的entry,自然无法响应arp了。
ASR1013-2#sh run vrf green1
Building configuration...
Current configuration : 515 bytes
vrf definition green1
!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
!
!
interface GigabitEthernet0/0/0
vrf forwarding green1
ip address 90.1.0.1 255.255.255.0
ip nat outside
load-interval 30
negotiation auto
cdp enable
!
interface GigabitEthernet0/0/1
vrf forwarding green1
ip address 100.100.100.1 255.255.255.0
ip nat inside
load-interval 30
negotiation auto
cdp enable
ip nat inside source static 100.100.100.142 90.1.0.14 vrf green1 match-in-vrf
!
!
end
ASR1013-2#show ip alias
Address Type IP Address Port
Interface 10.74.9.121
Interface 90.1.0.1
Dynamic 90.1.0.14
Interface 100.100.100.1
Interface 192.168.1.2
ASR1013-2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
ASR1013-2(config)#no ip nat inside source static 100.100.100.142 90.1.0.14 vrf green1 match-in-vrf
ASR1013-2(config)#ip nat inside source static 100.100.10