Hi, Please use "set interface nat44 in loop0 in loop1 in loop2 in loop3 out BondEthernet0" (you should set your one outside NAT interface only once).
Regards, Matus -----Original Message----- From: vpp-dev-boun...@lists.fd.io [mailto:vpp-dev-boun...@lists.fd.io] On Behalf Of Carlito Nueno Sent: Wednesday, January 17, 2018 10:08 PM To: vpp-dev@lists.fd.io Subject: [vpp-dev] nat with multiple in single out Hi, I have 4 VLANs each with loopback interface and a tap interface. I want each of the tap interfaces to have access to the WAN (internet) via BondEthernet0 interface. I am using ubuntu. snat config: nat44 add interface address BondEthernet0 set interface nat44 in loop0 out BondEthernet0 // gw addr 10.0.0.1 (ltap0) set interface nat44 in loop1 out BondEthernet0 // gw 10.1.0.1 (ltap1) set interface nat44 in loop2 out BondEthernet0 // gw 10.2.0.1 (ltap2) set interface nat44 in loop3 out BondEthernet0 // gw 10.3.0.1 (ltap3) I am setting route as: sudo route add default gw 10.3.0.1 dev ltap3 I am not able to ping. (ping -I ltap3 google.com) But when I change the order, move loop3 to second position or first position, I can ping via ltap3 nat44 add interface address BondEthernet0 set interface nat44 in loop0 out BondEthernet0 // gw addr 10.0.0.1 (ltap0) set interface nat44 in loop3 out BondEthernet0 // gw 10.3.0.1 (ltap3) set interface nat44 in loop1 out BondEthernet0 // gw 10.1.0.1 (ltap1) set interface nat44 in loop2 out BondEthernet0 // gw 10.2.0.1 (ltap2) I can only ping via whatever interfaces are set in first and second position. Also when I have more than one set interface nat44, I see an error in the logs: set interface nat44: add BondEthernet0 failed when loop3 is in second position: vpp# sh nat44 detail NAT plugin mode: dynamic translations enabled loop0 in BondEthernet0 out loop3 in NAT44 pool addresses interfaces: BondEthernet0 10.1.0.71 tenant VRF independent 0 busy udp ports 0 busy tcp ports 0 busy icmp ports 0 users, 1 outside addresses, 0 active sessions, 0 static mappings Hash table in2out-ed 0 active elements 0 free lists 0 linear search buckets 0 cache hits, 0 cache misses Hash table out2in-ed 0 active elements 0 free lists 0 linear search buckets 0 cache hits, 0 cache misses Thanks _______________________________________________ vpp-dev mailing list vpp-dev@lists.fd.io https://lists.fd.io/mailman/listinfo/vpp-dev _______________________________________________ vpp-dev mailing list vpp-dev@lists.fd.io https://lists.fd.io/mailman/listinfo/vpp-dev
