Ch11 NAT - Practical

Question 1

Configure Static NAT (6)

Answer 1

1. ip nat inside source static local_ip global_ip //Establishes static translation between inside local address and inside global address.
2. interface interface_id // Specifies interface to be used for inside.
3. ip nat inside // Marks the interface as connected to the inside.
4. exit // exits configuration mode
5. interface interface_id // Specify interface to be used for outside.
6. ip nat outside // Marks the interface as connected to the outside.

Question 2

3 Ways to Verify Static NAT Translations

Answer 2

1. show ip nat translations // shows active NAT translations.
2. show ip nat statistics
3. clear ip nat statistics // used to clear NAT stats for testing.

Question 3

Configure Dynamic NAT (7)

Answer 3

1. ip nat pool pool_name start_ip end_ip {netmask subnet_mask | prefix-length prefix_length }
2. access-list acl_number permit ip_source [source_wildcard] // creates acl permitting addresses that should be translated.
3. ip nat inside source list acl_number pool pool_name // establish dynamic NAT and links acl and NAT pool.
4. interface inside_interface_id
5. ip nat inside
6. interface outside_interface_id
7. ip nat outside

Question 4

4 Ways to Verify Dynamic NAT

Answer 4

1. show ip nat translations {verbose}
2. clear ip nat translations * // clears dynamic translations from NAT table.
3. show ip nat statistics
4. show running-config // look for NAT/ACL/interface/pool commands

Question 5

Configure PAT - Address Pool (7)

Answer 5

1. ip nat pool pool_name start_ip end_ip {netmask subnet_mask | prefix-length prefix_length}
2. access-list acl_number permit source_ip [source_wildcard]
3. ip nat inside source list acl_number pool pool_name overload
4. interface inside_interface_id
5. ip nat inside
6. interface outside_interface_id
7. ip nat outside

Question 6

Configure PAT - Single Address (6)

Answer 6

1. access-list acl_name permit source_ip [source_wildcard]
2. ip nat inside source list acl_number inteface exit_interface_id overload // ip same as used in outside_interface_id in step 5
3. interface inside_interface_id
4. ip nat inside
5. interface outside_interface_id
6. ip nat outside

Question 7

Configure Port Forwarding (5)

Answer 7

1. ip nat inside source {static {tcp | udp local_ip local _port global_ip global_port } [extendable]
2. interface inside_interface_id
3. ip nat inside
4. interface outside_interface_id
5. ip nat outside