NAT Peer State Synchronization

Introduction NAT Peer State Synchronization feature provides redundancy and resiliency for Dynamic NAT across pair of devices in attempt to mitigate the risk of single NAT device failure. Both devices in redundant pair are active. Both of them track new sessions and create or delete NAT entries dynamically. Essentially, an active NAT entry is maintained on both devices irrespective of who created it. Platform compatibility NAT Peer State Synchronization is supported on the following platforms: DCS-7150 Configuration The following requirements must be ensured before enabling NAT Peer State Synchronization on devices in redundant pair Both devices in redundant pair must...
Continue reading →

Arista 7150 Series Hardware Based NAT For Unicast Traffic

Arista 7150 series switches use Intel’s Fulcrum FM6000 (code named ‘Alta’) ASIC for packet processing. The ASIC includes several features for IP header translation including Network Address Translation (NAT). In doing so, packets to be NAT’d are processed by the ASIC which is known as Hardware NAT rather than by CPU known as Software NAT. Hardware NAT provides much better scale and performance compared to Software NAT.  The 7150 series switches can provide 10/40Gbps line rate hardware based NAT  across all Ethernet ports at the same time. The number of available ports varies depending on the particular model – it...
Continue reading →

Many-to-One NAT (PAT) with Pool

Hi All, After the issues with my previous post I have come across a new issue(?). So I am now trying to get PAT to work via my new setup. In EOS-4.14.6M Manual it statse that PAT is possible when using a pool: Define the NAT Source Address for Translation Use the ip nat source dynamic command to specify that you want a dynamic translation from the source IP address to the pool, and that you want to overload the pool address (or addresses). Example • This command configures the dynamic NAT source address and sets the pool P2 NAT overload. switch(config)#interface...
Continue reading →

Source NAT on Arista1 and Destination NAT on Arista2

Hi All, I am trying to perform dynamic source NAT (overload) on one Arista 7150s device and Destination NAT on another Arista 7150s device. Topolopy is: Juniper MX960 -vlan3002-> Arista1 -vlan701-> Arista2 (vlan100) I am just trying to see if I can SSH from the Juniper device with a Source NAT performed on Arista1 to a Destination NAT performed on Arista2 which is just another vlan interface. Below is the configuration I currently have for each device: Juniper: set interfaces xe-0/1/0 unit 3002 family inet address 192.168.254.1/30 set routing-options static route 10.1.1.1/32 next-hop 192.168.254.2 set routing-options static route 10.1.1.2/32 next-hop...
Continue reading →

7150S NAT – Practical Guide – Source NAT – Dynamic

Introduction This article presents Dynamic Source NAT, as part of a series of articles about Source NAT on the Arista 7150S with practical examples. It assumes an understanding of NAT and Source NAT. See the article Static Source NAT as foundation to the present Dynamic Source NAT article The following topics are covered in this article: Dynamic Source NAT with Pool Dynamic Source NAT Overload   The following additional topics are covered in other articles: Static Source NAT Source NAT – Baseline Static Source NAT – Unicast and multicast with routed ports Static Source NAT – with SVI Static Source NAT + ACL...
Continue reading →

7150S NAT – Practical Guide – Source NAT – Static

    Introduction This article presents Static Source NAT, as part of a series of articles about Source NAT on the Arista 7150S with practical examples. The following topics are covered in this article: Source NAT – Baseline Static Source NAT – Unicast and multicast with routed ports Static Source NAT – with SVI Static Source NAT + ACL Match Static Source NAT + PAT   The following additional topics are covered in other articles: Dynamic Source NAT with Pool Dynamic Source NAT Overload Static Twice NAT Static Twice NAT – With SVI Troubleshooting Tuning NAT     1) Source NAT –...
Continue reading →

NAT Overload

Hi all, I want to setup dynamic NAT and map it to the ip address of my SVI (many to one).  Any tips? I have tried a few config variations, but the following appears to be what I need. What am I missing? I am running 4.12.7.1 on a 7150s Thanks in advance! interface Vlan4 ip address my.public.ip/31 ip nat source dynamic access-list nat-out overload IP Access List nat-out 10 permit ip 50.112.0.0/17 any #This is the destination network. I have tried the same config w/ an ACL that specifies source and destination, but that did not work for me either:...
Continue reading →

Dynamic NAT

Hi all, I want to configure dynamic nat, PAT, on my 7150s running 4.12.7.1, but haven’t had any luck getting the translation to work. I have tried a few configuration variations, but the following is the one I believe should work. Any suggestions? What am I missing? I want the source address to translate to the address of the SVI: IP Access List nat1 10 permit ip 10.200.250.0/24 50.112.0.0/17 interface Vlan14 ip address my.pub.lic.ip/31 ip nat source dynamic access-list nat1 overload Thanks in advance!