Configuring Service Side NAT

Configuring Service Side NAT

In Cisco Viptela, both Dynamic NAT and Static NAT can be configured in service VPN of vEdge router. To configure the Service Side NAT, following method is to be followed.

• Configure or Create NAT Pool Interface
• Configure or Create Data Policy to direct data traffic to service side NAT
• Configure Dynamic or Static NAT

Let’s see the above steps one by one.

Create a NAT Pool interface:

This NAT pool interface on router NATs data traffic when any data traffic is directed to it and then send the traffic towards destination.

In required VPN, create NAT Pool interface

Configure the NAT pool interface's IP address:

Length of IP address determines number of address router can do NAT at one time. For each NAT pool interface maximum 250 IP address can be configured.

Enable the interface:

Configure or Create Data Policy to direct data traffic to service side NAT

This steps is used, when we need to direct the traffic from service VPN to NAT, a centralized data policy on vSmart controller is to be configured. Once Match is done, the matched traffic is diverted to NAT.

Configure the lists required for the data policy that is list of VPN and sites, matching data prefixes.

Configure a data policy:

Configure the desired match conditions:

In the action, associate matching data traffic with the desired NAT pool:

Configure the desired default action for the data policy:

Apply the policy to the desired sites in the overlay network:

Configure Dynamic NAT:

By default, when any router is configured to act as NAT device, it does Dynamic NAT and it can perform dynamic NAT up to 250 IP address across NAT pools.