6509 Dual MSFC2's Looking to enable NAT?

[MJewell]

Has anyone played with this on the 6509's? I'm currently running:
6509 Dual Sup2 (Active/Standby) running 8.1.2 CatOS
Dual MSFC2 Active/Active mode running 12.1(8a)E5 (I know, been meaning to upgrade them)

I am in a unique environment with 12 4006's connected via GBIC's with about 15 classrooms (all with network access)
with between 40 - 130 seats per room


and I would like to NAT the public classrooms (right now I have to have about 3000 IP's to cover them all) but I've never played with this and haven't found a lot of info on Cisco's website about setting up NAT pools and stuff.. anyone done this on these? Thoughts and Suggestions are welcome...

Thanks,
Mike

 

[IPKONFIG]

You can do it. I'd suggest you upgrade your MSFC's to a 12.2 version first. Then you can get specific information about NAT and how to set it up here:

http://www.cisco.com/en/US/tech/tk648/tk361/technologies_tech_note09186a0080094e77.shtml

This should get you rolling. Configure the NAT on your MSFC's for each routed vlan you have.

"I can picture a world without war. A world without hate. A world without fear. And I can picture us attacking that world, because they'd never expect it."
- Jack Handey, Deep Thoughts

 

[MJewell]

I've started looking at that info, Thanks a lot... only thing I was thinking of, is I run both Routers in Load balancing mode, should I take a 255.255.255.0 subnet and divide it 1/2 and 1/2 for each router for addresses, or configure both routers with the same nat pool, or I also saw some other info on Stateful NAT Primary/Backup configuration?

Thoughts?

-Mike

 

[IPKONFIG]

Yes, divide the NAT pools. Give one MSFC X.X.X.1-100 and the other MSFC X.X.X.101-254. Something similar to that would work well. Not sure on the Stateful NAT. Are you wanting to do 1:1 NAT or you going to be overloading?

"I can picture a world without war. A world without hate. A world without fear. And I can picture us attacking that world, because they'd never expect it."
- Jack Handey, Deep Thoughts

 

[MJewell]

I would imagine overloading would be easier for the router processor wise, any traffic mark as xxx.xxx.xxx.34 IP, rather then having to look up in the NAT table everytime...

however having never played with this, I'm open to sugestions... I have the IP's to not overload, but I did want to eliminate some of the IP's I'm using, 3000 just gets too confusing...

Thoughts?

-Mike

 

[IPKONFIG]

I'd use overload if it was me. Just my opinion though.

"I can picture a world without war. A world without hate. A world without fear. And I can picture us attacking that world, because they'd never expect it."
- Jack Handey, Deep Thoughts

 

[Syty]

This really good advice, overload is the way to go