NAT intra-VRF NAT

NAT, by default is vrf-aware and is able to translate between addresses that exist within different VRFs. In order to extend this VRF-awareness to intra-VRF NAT translations, the match-in-vrf keyword must be used in the ip nat command like so:

Device(config)# ip nat inside source static 192.168.11.10 10.11.11.10 vrf 1 match-in-vrf track 1

For inter-VRF NAT translations simply use the vrf keyword and the name of the VRF in question.

Links:

https://www.cisco.com/c/en/us/td/docs/routers/sdwan/command/iosxe/qualified-cli-command-reference-guide/m-NAT-commands.html#GUID-760551B7-59C5-4F58-AAD1-9F76F92133AB

https://forum.networklessons.com/t/nat-with-two-outside-interfaces/1022/23?u=lagapides