Abrer_Wiki

You've loaded an old revision of the document! If you save it, you will create a new version with this data.

===== Static NAT Configuration =====
Static NAT requires few configuration steps. Each static mapping between local and global addresses **must** be configured. Not unlike a static entry for every static IP address required. You must inform the router on which interfaces to use ''**NAT**''. Interface subcommands inform the router which interfaces are ''**inside**'' / ''**outside**''.
  - ''**ip nat inside**'' command on an interface to specify inside.
  - ''**ip nat outside**'' command on an interface to specify outside.
  - ''**ip nat inside source static inside-local inside-global**'' from global config to configure the static mappings.
  - inside local will be a LAN IP - inside global will be your public IP (an EXTRA public IP).
===== Port Address Translation =====
Create an access list to match a group of source addresses as needed -- why else would we overload?
<code>
R1(config-std-nacl)#permit 10.1.1.0 0.0.0.255

R1#sh access-lists 
Standard IP access list NAT
    10 permit 10.1.1.0, wildcard bits 0.0.0.255 (2 matches)
    20 deny   any
</code>
Then configure NAT to match against entries in the NAT list configured above. Specify ''**OVERLOAD**'' to enable PAT.
<code>
ip nat inside source list MY_LIST int fa0/0 OVERLOAD
</code>

===== Verify NAT =====
<code>
R1#sh ip nat statistics 
Total active translations: 0 (0 static, 0 dynamic; 0 extended)
Outside interfaces:
  FastEthernet0/0, Serial0/0
Inside interfaces: 
  FastEthernet0/1, Loopback0
Hits: 16  Misses: 2
CEF Translated packets: 18, CEF Punted packets: 0
Expired translations: 2
Dynamic mappings:
-- Inside Source
[Id: 2] access-list NAT interface FastEthernet0/0 refcount 0
Appl doors: 0
Normal doors: 0
Queued Packets: 0

R1#sh ip nat translations 
Pro Inside global      Inside local       Outside local      Outside global
icmp 2.2.2.1:1         10.1.1.1:1         2.2.2.2:1          2.2.2.2:1
icmp 2.2.2.1:11        10.1.1.3:11        2.2.2.2:11         2.2.2.2:11

</code>
==== Clear NAT Translations ====
Useful with dynamic NAT in the event you run out of dynamic addresses to translate to. Clearing translations will free up slots if the clearout timer isn't quick enough.
<code>
R1#clear ip nat translation *
</code>

Edit summary

Note: By editing this page you agree to license your content under the following license: CC Attribution-Share Alike 4.0 International

Abrer_Wiki

User Tools

Site Tools

Page Tools