I've setup a network consisting a "AUTOMAÇÃO->Automation" lan, "Rede interna->Internal network" and the WAN (f0/1). Every device is cisco except 200A (fortigate).

Everyone on internal network must access internet using PAT but automation should not. On the 200A router side, there is a GRE tunnel to 1905-sec router and clients from which network can access each other. So, I need to map an internal IP from "Internal networw" on 1905-sec router to translate that into a internal IP on automation network.

  • Internal network 1905-sec:
  • Automation network 1905-sec:
  • Internal network 200A:

f0/1 is outside nat, f0/0 is inside nat. Since I have to map a IP of internal network to be translated into and routed to f1/0 I can't make f0/0 be outside and inside at the same time.

How can I use PAT for normal operating mode and static nat to translate as a global address and as a inside address witout messing with PAT?

EDIT: I did it! I used NVI. checkout the solution: http://www.ciscozine.com/nat-virtual-interface-aka-nvi-what-is-that/

enter image description here


1 Answer 1


I resolved using NAT virtual interface. http://www.ciscozine.com/nat-virtual-interface-aka-nvi-what-is-that/

  • You should accept your answer so that the question doesn't keep poppiing up forever, looking for an answer.
    – Ron Maupin
    Jul 12, 2017 at 21:05

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.