Quản trị mạng Lab 8 - NAT

CCNA LAB No. 8: NAT configuration Lab time: 1 sessions
 Students are recommended to read the entire lab requirement before starting. The TIP session should
only be used for troubleshooting. For any problem concerns hardware or losing connectivity, please contact
instructor.
Topology
Caution:
- R-X is the name of router. X is from 1 to 8.
Task:
1. Configure IP on the interfaces of routers as shown in the above figure.
R-X(config)#int e0
R-X(config-if)#ip address 10.2.0.16X 255.255.255.0
R-X(config-if)#no shut
R-X(config)#int loopback 0
R-X(config-if)#ip address 100.0.X.1 255.255.255.0
2. Configure so that Lo 0 network will be the inside interface and Ethernet 0 network will be
the outside
R-X(config)#int loopback 0
R-X(config-if)#ip nat inside
R-X(config)#int e0
R-X(config-if)#ip nat outside
3. Configure static NAT on R-X so that the private IP address of Lo 0 interface will be
translated into available public IP address in the given address pool .
The router will translate packets from host 100.0.X.1 to a source address of 10.2.0.16X
R-X(config)# ip nat inside source static 100.0.X.1 10.2.0.16X
4. Check your NAT configuration by using extended ping command with the source address
is Lo 0 and the destination is 10.2.0.251

5. Erase static NAT configuration. Configure dynamic NAT on R-X so that all private IP
addresses behind Lo 0 network will be translated using different public IP addresses in the
given address pool
- The access list must permit only those addresses that are to be translated

R-X(config)# access-list 1 permit 100.0.X.0 0.0.0.255
- Define a pool of global addresses to be allocated as needed
R-X(config)#ip nat pool <name> 10.2.0.12X 10.2.0.13X netmask 255.255.255.0
- Dynamic translation uses the addresses permitted by the access list to be translated
R-X(config)#ip nat inside source list 1 pool <name>
6. Check your NAT configuration by using extended ping command with the source address
is Lo 0 and the destination is 10.2.0.251
7. Erase dynamic NAT configuration. Configure NAT overload on R-X so that the all the hosts
with private IP addresses behind Lo 0 network can access the public network at the same
time.
Enter the global command no ip nat pool <name> to remove the pool of global
addresses.
Configure overloading in this situation
R-X(config)# ip nat inside source list 1 interface ethernet 0 overload
8. Check your NAT configuration by using extended ping command with the source address
is Lo 0 and the destination is 10.2.0.251
9. Using show and debug command to verify your NAT configuration
R1#show ip nat statistics
R1#debug ip nat

End of lab 8