VRF-aware NAT

VRF-aware NAT allows users from different VRF (VPN instances) to access external networks and to access each other.

1. Upon receiving a request from a user in a VRF to an external network, NAT performs the following tasks:

   • Translates the private source IP address and port number to a public IP address and port number.

   • Records the VRF information, such as the VRF name.

2. When a response packet arrives, NAT performs the following tasks:

   • Translates the destination public IP address and port number to the private IP address and port number.

   • Forwards the packet to the target VRF.