Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                

Ccna4-Lab 1: Nat & Pat: Scenario For NAT Configuration

Download as doc, pdf, or txt
Download as doc, pdf, or txt
You are on page 1of 2

Cantho University Network Training Center

CCNA4-Lab 1: NAT & PAT

Scenario for NAT configuration:


Company ABC has 30 public IP addresses 199.99.9.32/27 (199.99.9.33 – 199.99.9.39) from ISP.
The IT manager has decided to implement NAT: 199.99.9.33 – 199.99.9.39 for static allocation
and 199.99.9.40 – 199.99.9.62 for dynamic allocation.
Part 1: Configuration Static NAT
- Basic configuration (hostname, enable and telnet password, …) for each Router.
- Configure ip address, subnetmask, … for each interface on both Routers.
- Configure ip address, subnetmask, default gateway for each PC.
- On ISP router, create a static route to the Gateway router. Addresses 199.99.9.32/27
have been allocated for Internet access outside of the company.
ISP(config)#ip route 199.99.9.32 255.255.255.224 200.2.2.18
“No route to 10.10.10.0 /24 network (private - LAN), only has route to real addresses.”
- On Gateway router, create the default route to Internet.
Gateway(config)# ip route 0.0.0.0 0.0.0.0 200.2.2.17
- Configuring static mapping: assign 1 public IP address for PC1.
Gateway(config)# ip nat inside source static 10.10.10.10 199.99.9.33
- Specify the interfaces to setup NAT.
Gateway(config)# interface Fa0
Gateway(config-if)#ip nat inside
Gateway(config-if)#interface S1
Gateway(config-if)#ip nat outside
- Testing the configuration.
 Check NAT translation, by using command:
Gateway(config)# show ip nat translations
 Ping from PC1 to Loopback 0 of ISP.
 From ISP Router, ping 10.10.10.10
 From ISP Router, ping 199.99.9.33
- Verifying NAT configuration: Gateway(config)# show ip nat statistic
Part 2: Configuration Dynamic NAT
- Configure 5 first steps as in Part 1.
- Define the pool of public addresses.
Gateway(config)# ip nat pool ABCPool1 199.99.9.40 199.99.9.62
netmask 255.255.255.224
- Define an access list that will match the inside private IP addresses.
Gateway(config)# access-list 1 permit 10.10.10.0 0.0.0.255
- Define the NAT translation from inside list to outside pool.
Gateway(config)# ip nat inside source list 1 pool ABCPool1
- Specify the interfaces to setup NAT.
Gateway(config)# interface Fa0
Gateway(config-if)#ip nat inside
Gateway(config-if)#interface S1
Gateway(config-if)#ip nat outside
- Testing the configuration.
Not To Be Distributed Page 1 of 2
Cantho University Network Training Center
 Check NAT translation, by using command:
Gateway(config)# show ip nat translations
 Ping from PC2 to Loopback 0 of ISP. Check address translation.
- Verifying NAT configuration: Gateway(config)# show ip nat statistic

Scenario for PAT configuration:


Company ABC has 1 Internet connection. The ISP has allocated only 1 IP address to be used on the
serial port of his remote access device. All PCs on ABC network will share 1 public IP address on
the router using PAT.
Part 3: Configuration PAT
- Basic configuration (hostname, enable and telnet password, …) for each Router.
- Configure ip address, subnetmask, … for each interface on both Routers.
- Configure ip address, subnetmask, default gateway for each PC.
- On Gateway router, create the default route to Internet.
Gateway(config)# ip route 0.0.0.0 0.0.0.0 S1
- Define an access list that will match the inside private IP addresses.
Gateway(config)# access-list 1 permit 10.10.10.0 0.0.0.255
- Define the PAT translation from inside list to outside address.
Gateway(config)# ip nat inside source list 1 interface S1 overload
or
define the pool of public address and configure PAT translation designated in the pool
Gateway(config)# ip nat pool ABCPool1 199.99.9.40 199.99.9.62
netmask 255.255.255.224
Gateway(config)# ip nat inside source list 1 pool ABCPool1 overload
- Specify the interfaces to setup PAT.
Gateway(config)# interface Fa0
Gateway(config-if)#ip nat inside
Gateway(config-if)#interface S1
Gateway(config-if)#ip nat outside
- Testing the configuration.
 Check PAT translation, by using command:
Gateway(config)# show ip nat translations
 Ping from PC1 to Loopback 0 of ISP. Check address translation.
 Open many DOS Prompt, ping to Lo0 port of ISP. Check address translation.
 Telnet from PC1 to Loopback 0 of ISP. Check address translation.
- Verifying NAT configuration: Gateway(config)# show ip nat statistic

Not To Be Distributed Page 2 of 2

You might also like