(There was a previous question that resolved the VLAN issue.)
I have a section of topology where a 2911 is acting as an internal NAT router. (We don't have enough private IP addresses to give to all our lab servers and networking equipment. So we have our own reserved addresses that aren't routable across the corporate network).
The 2911 is using one private IP address to NAT lab IP addresses
! interface GigabitEthernet0/0 ip address 126.96.36.199 255.255.255.0 ip nat outside ip virtual-reassembly in duplex auto speed auto ! interface GigabitEthernet0/1 no ip address duplex auto speed auto ! interface GigabitEthernet0/2 no ip address duplex auto speed auto ! interface GigabitEthernet0/2.100 encapsulation dot1Q 100 ip address 10.0.0.1 255.255.255.0 ip nat inside ip virtual-reassembly in ! interface GigabitEthernet0/2.200 encapsulation dot1Q 200 ip address 10.1.0.1 255.255.255.0 ip nat inside ip virtual-reassembly in ! ip nat inside source list 1 interface GigabitEthernet0/0 overload ip route 0.0.0.0 0.0.0.0 188.8.131.52 ! access-list 1 permit any ! ! ! control-plane !
I have 16 Nexus switches, but I'm showing one as a sample here. (If I can get this going, the rest should be easy).
vlan 1,100,102-103,200 vrf context management interface Vlan1 interface Vlan100 no shutdown ip address 10.0.0.22/24 interface Vlan200 no shutdown ip address 10.1.0.22/24 interface Ethernet1/1 switchport access vlan 200 interface Ethernet1/40 switchport access vlan 100 interface Ethernet1/48 switchport mode trunk interface Ethernet1/49 switchport access vlan 200 interface Ethernet1/50 switchport access vlan 200
While a Nexus can ping the default GW of each VLAN , it can't ping outside of the 2911 network.
PING 10.0.0.1 (10.0.0.1): 56 data bytes 64 bytes from 10.0.0.1: icmp_seq=0 ttl=254 time=0.765 ms 64 bytes from 10.0.0.1: icmp_seq=1 ttl=254 time=0.571 ms 64 bytes from 10.0.0.1: icmp_seq=2 ttl=254 time=0.547 ms 64 bytes from 10.0.0.1: icmp_seq=3 ttl=254 time=0.54 ms 64 bytes from 10.0.0.1: icmp_seq=4 ttl=254 time=0.534 ms --- 10.0.0.1 ping statistics --- 5 packets transmitted, 5 packets received, 0.00% packet loss round-trip min/avg/max = 0.534/0.591/0.765 ms 2# ping 10.1.0.1 PING 10.1.0.1 (10.1.0.1): 56 data bytes 64 bytes from 10.1.0.1: icmp_seq=0 ttl=254 time=0.785 ms 64 bytes from 10.1.0.1: icmp_seq=1 ttl=254 time=0.565 ms 64 bytes from 10.1.0.1: icmp_seq=2 ttl=254 time=0.557 ms 64 bytes from 10.1.0.1: icmp_seq=3 ttl=254 time=0.532 ms 64 bytes from 10.1.0.1: icmp_seq=4 ttl=254 time=0.538 ms --- 10.1.0.1 ping statistics --- 5 packets transmitted, 5 packets received, 0.00% packet loss round-trip min/avg/max = 0.532/0.595/0.785 ms 2# ping 184.108.40.206 PING 220.127.116.11 (18.104.22.168): 56 data bytes ping: sendto 22.214.171.124 64 chars, No route to host
What am I missing to make NAT & Routing work? Also, is this just the Nexus management? Can hosts connected to the Nexus talk to outside already?
the 2911 can ping anything by the way.
C(config)# vrf context management C(config-vrf)# ip route 0.0.0.0/0 10.1.0.1 (same result with 10.0.0.1) C(config-vrf)# ping 126.96.36.199 PING 188.8.131.52 (184.108.40.206): 56 data bytes ping: sendto 220.127.116.11 64 chars, No route to host Request 0 timed out ping: sendto 18.104.22.168 64 chars, No route to host