nat
vpn interface nat— Configure a vEdge router to act as a NAT device (on vEdge routers only).
In the transport VPN (VPN 0), you can configure multiple NAT interfaces. In this configuration traffic is load-balanced, via ECMP, among the interfaces.
You can configure a NAT on a physical interface or on a natpool interface. You cannot configure NAT on a loopback interface. Note that for a natpool interface, you can configure only the interface's IP address, shutdown and no shutdown command, and the nat command and its subcommands. You cannot configure another other interface commands.
vManage Feature Template
For vEdge routers only:
Configuration ► Templates ► VPN Interface Cellular (for vEdge cellular wireless routers only)
Configuration ► Templates ► VPN Interface Ethernet
Configuration ► Templates ► VPN Interface NAT Pool
Configuration ► Templates ► VPN Interface PPP
Command Hierarchy
vpn vpn-id interface [genumber/slot | natpoolnumber] nat block-icmp-error direction (inside | outside) log-translations natpool range-start ip-address1 range-end ip-address2 [no] overload port-forward port-start port-number1 port-end port-number2 proto (tcp | udp) private-ip-address ip-address private-vpn vpn-id refresh (bi-directional | outbound) respond-to-ping static source-ip ip-address1 translate-ip ip-address2 (inside | outside) static source-ip ip-address1 translate-ip ip-address2 source-vpn vpn-id protocol (tcp | udp) source-port number translate-port number tcp-timeout minutes udp-timeout minutes
Options
None
Operational Commands
show ip nat filter
show ip nat interface
show ip nat interface-statistics
Example
Configure a vEdge router to act as a NAT:
vEdge# config vEdge(config)# vpn 1 interface ge0/4 nat
Release Information
Command introduced in Viptela Software Release 14.2.
Starting with Release 15.1, multiple NAT interfaces can be configured.
In Release 16.3, add support for 1:1 static NAT and dynamic NAT.
Additional Information
See the Configuring Centralized Data Policy, Configuring Local Internet Exit, Configuring Transport-Side NAT, and Using a vEdge Router as a NAT Device articles and the Administrative Distance section in the Unicast Overlay Routing article for your software release.
action
encapsulation
ip gre-route
ip route