[Linux-vrf-general] NAT from vrf0 to specific VRF-IPs

[Flavio C. <lis...@no...>]

Hello

We run a VPN-Concentrator where multiple VPNs terminate on a Cisco in
seperate VRF instances. These VPNs are not reachable from the internet.
Now in order to monitor inside these VRF instances, I'd like to setup a
monitor host.

I already setup linux-vrf, with multiple vrf instaces, which can reach
the hosts inside those vrfs.

Now I'd like to NAT certain ip's on vrf 0 eth0 to IPs inside a certain
VRF.

Lets say I have

vrf 0:
  eth0: 192.168.10.1, 192.168.10.2, 192.168.10.3

vrf 1:
  eth1.1: 192.168.254.2
  192.168.255.0/24 via 192.168.254.1

vrf 2:
  eth1.1: 192.168.254.2
  192.168.255.0/24 via 192.168.254.1

vrf 3:
  eth1.1: 192.168.254.2
  192.168.255.0/24 via 192.168.254.1

Now i want the following NATs:

192.168.10.1 vrf 0 <-> 192.168.255.10 vrf 1
192.168.10.2 vrf 0 <-> 192.168.255.10 vrf 2
192.168.10.3 vrf 0 <-> 192.168.255.10 vrf 3

Is this somehow possible?

Thank you and kind regards

Flavio Curti


--
http://no-way.org/~fcu/