The A10 does not perform DHCP functions to the inside, CGN devices. The NAT is only performed on traffic which traverses the device. You will need an additional server/device to perform the DHCP functions for the CGN users.
Correct - Typically the CGN User will receive an IP from some DHCP server, and then policy based routing for CGN addresses will redirect traffic to the A10 as a routed hop. When the A10 receives the traffic, NAT is performed, and traffic is forwarded upstream. That in mind, the lsn pool you define should contain routable public IP’s.
I have not tested a “wildcard” class-list definition like you have there with 0.0.0.0/0. That may work, but if traffic isn’t picked up by the lsn-lid, then I would advise defining the CGN address space you’re serving in DHCP in the class list.
One other item I noted is that you do not have an Outside interface defined. Perhaps you redacted for the post, but you’ll need one of those as well.
This is looking better, but it doesn’t look like you have the the “public” nat pool bound to the lsn-lid.
You also may wish to review adding port-batching to your cgnv6 nat pool config. the A10 Transition Solutions Guide (TRSOL in the documentation PDFs) has a lot of good info on the rest of the CGN features.
For fixed-nat, you don’t need “lsn-lid 1” or the “cgnv6 nat pool lsn-pool-01”, so you may wish to remove those.
How do you plan to direct traffic to the A10? Is the A10 layer 2 adjacent to customer or a routed hop? If routed hop, you’ll need a route for return traffic to client.
I don’t see IP addresses on the A10 interfaces. If A10 is connected to untagged switchports, you can skip the “untag vlan” configuration and apply the IP addresses directly to the A10 interfaces.
I actually need “Port Address Translation” because I’m an ISP with limited amount of public IP addresses so I was thinking about 30-100 customers behind every public IP.
I’m going to have the 1040 connected in/out next to the core router Huawei NE40e-M2K that is going to act as DHCP as well initially.
When you say routed hop, do you mean a private link-net between inside and outside ports to core and then ip routes?
I’m having a really hard time understanding the CGN equipment and the communication logic between A10 and core.
Is it LSN that would equal “Port Address Translation”? (see attached picture)
