The document describes scenarios for configuring NAT, static NAT, dynamic NAT, and PAT on routers. It outlines the steps to configure static and dynamic NAT mappings between private and public IP addresses allocated by an ISP. It also describes configuring PAT to allow multiple private IP addresses to share a single public IP address for Internet access. Key steps include defining NAT pools, access lists, and interface configuration for inside and outside networks. The goal is to allow private addresses on company ABC's network to access the public Internet through the routers' public IP addresses allocated by their ISP.
The document describes scenarios for configuring NAT, static NAT, dynamic NAT, and PAT on routers. It outlines the steps to configure static and dynamic NAT mappings between private and public IP addresses allocated by an ISP. It also describes configuring PAT to allow multiple private IP addresses to share a single public IP address for Internet access. Key steps include defining NAT pools, access lists, and interface configuration for inside and outside networks. The goal is to allow private addresses on company ABC's network to access the public Internet through the routers' public IP addresses allocated by their ISP.
The document describes scenarios for configuring NAT, static NAT, dynamic NAT, and PAT on routers. It outlines the steps to configure static and dynamic NAT mappings between private and public IP addresses allocated by an ISP. It also describes configuring PAT to allow multiple private IP addresses to share a single public IP address for Internet access. Key steps include defining NAT pools, access lists, and interface configuration for inside and outside networks. The goal is to allow private addresses on company ABC's network to access the public Internet through the routers' public IP addresses allocated by their ISP.
The document describes scenarios for configuring NAT, static NAT, dynamic NAT, and PAT on routers. It outlines the steps to configure static and dynamic NAT mappings between private and public IP addresses allocated by an ISP. It also describes configuring PAT to allow multiple private IP addresses to share a single public IP address for Internet access. Key steps include defining NAT pools, access lists, and interface configuration for inside and outside networks. The goal is to allow private addresses on company ABC's network to access the public Internet through the routers' public IP addresses allocated by their ISP.
Download as DOC, PDF, TXT or read online from Scribd
Download as doc, pdf, or txt
You are on page 1of 2
Cantho University Network Training Center
CCNA4-Lab 1: NAT & PAT
Scenario for NAT configuration:
Company ABC has 30 public IP addresses 199.99.9.32/27 (199.99.9.33 – 199.99.9.39) from ISP. The IT manager has decided to implement NAT: 199.99.9.33 – 199.99.9.39 for static allocation and 199.99.9.40 – 199.99.9.62 for dynamic allocation. Part 1: Configuration Static NAT - Basic configuration (hostname, enable and telnet password, …) for each Router. - Configure ip address, subnetmask, … for each interface on both Routers. - Configure ip address, subnetmask, default gateway for each PC. - On ISP router, create a static route to the Gateway router. Addresses 199.99.9.32/27 have been allocated for Internet access outside of the company. ISP(config)#ip route 199.99.9.32 255.255.255.224 200.2.2.18 “No route to 10.10.10.0 /24 network (private - LAN), only has route to real addresses.” - On Gateway router, create the default route to Internet. Gateway(config)# ip route 0.0.0.0 0.0.0.0 200.2.2.17 - Configuring static mapping: assign 1 public IP address for PC1. Gateway(config)# ip nat inside source static 10.10.10.10 199.99.9.33 - Specify the interfaces to setup NAT. Gateway(config)# interface Fa0 Gateway(config-if)#ip nat inside Gateway(config-if)#interface S1 Gateway(config-if)#ip nat outside - Testing the configuration. Check NAT translation, by using command: Gateway(config)# show ip nat translations Ping from PC1 to Loopback 0 of ISP. From ISP Router, ping 10.10.10.10 From ISP Router, ping 199.99.9.33 - Verifying NAT configuration: Gateway(config)# show ip nat statistic Part 2: Configuration Dynamic NAT - Configure 5 first steps as in Part 1. - Define the pool of public addresses. Gateway(config)# ip nat pool ABCPool1 199.99.9.40 199.99.9.62 netmask 255.255.255.224 - Define an access list that will match the inside private IP addresses. Gateway(config)# access-list 1 permit 10.10.10.0 0.0.0.255 - Define the NAT translation from inside list to outside pool. Gateway(config)# ip nat inside source list 1 pool ABCPool1 - Specify the interfaces to setup NAT. Gateway(config)# interface Fa0 Gateway(config-if)#ip nat inside Gateway(config-if)#interface S1 Gateway(config-if)#ip nat outside - Testing the configuration. Not To Be Distributed Page 1 of 2 Cantho University Network Training Center Check NAT translation, by using command: Gateway(config)# show ip nat translations Ping from PC2 to Loopback 0 of ISP. Check address translation. - Verifying NAT configuration: Gateway(config)# show ip nat statistic
Scenario for PAT configuration:
Company ABC has 1 Internet connection. The ISP has allocated only 1 IP address to be used on the serial port of his remote access device. All PCs on ABC network will share 1 public IP address on the router using PAT. Part 3: Configuration PAT - Basic configuration (hostname, enable and telnet password, …) for each Router. - Configure ip address, subnetmask, … for each interface on both Routers. - Configure ip address, subnetmask, default gateway for each PC. - On Gateway router, create the default route to Internet. Gateway(config)# ip route 0.0.0.0 0.0.0.0 S1 - Define an access list that will match the inside private IP addresses. Gateway(config)# access-list 1 permit 10.10.10.0 0.0.0.255 - Define the PAT translation from inside list to outside address. Gateway(config)# ip nat inside source list 1 interface S1 overload or define the pool of public address and configure PAT translation designated in the pool Gateway(config)# ip nat pool ABCPool1 199.99.9.40 199.99.9.62 netmask 255.255.255.224 Gateway(config)# ip nat inside source list 1 pool ABCPool1 overload - Specify the interfaces to setup PAT. Gateway(config)# interface Fa0 Gateway(config-if)#ip nat inside Gateway(config-if)#interface S1 Gateway(config-if)#ip nat outside - Testing the configuration. Check PAT translation, by using command: Gateway(config)# show ip nat translations Ping from PC1 to Loopback 0 of ISP. Check address translation. Open many DOS Prompt, ping to Lo0 port of ISP. Check address translation. Telnet from PC1 to Loopback 0 of ISP. Check address translation. - Verifying NAT configuration: Gateway(config)# show ip nat statistic
Instant Download 101 Labs Cisco CCNA Hands on Practical Labs for the 200 301 Implementing and Administering Cisco Solutions Exam Paul Browning PDF All Chapters