A water utility runs overlapping RFC1918 spaces in separate VRFs th…

Question

A water utility runs overlapping RFC1918 spaces in separate VRFs that both need Internet egress. Why enable VRF-aware NAT?

Accepted Answer

To translate each VRF’s overlapping space independently into unique outside addresses for safe egress — Two departments both love 10.0.0.0/8 inside their own VRF bubbles—fine until they share an Internet door. VRF-aware NAT translates each bubble on the way out so the overlaps do not collide in the global outside world.

Answer

So a single global routing table can merge both VRFs without NAT

Answer

Because overlapping addresses are impossible once VRFs exist, making NAT irrelevant

Answer

To replace IPsec with NAT as the only inter-VRF confidentiality mechanism

A water utility runs overlapping RFC1918 spaces in separate VRFs that both need Internet egress. Why enable VRF-aware NAT?

Short Explanation

Full Explanation