Académique Documents
Professionnel Documents
Culture Documents
Page 1 of 11
Submit Query
Solution
Note: If you are not sure how NAT & PAT work, please read my Network Address Translation NAT
Tutorial. You can download a similar sim to practice here:
http://www.9tut.com/download/9tut.com_CCNA_NAT_sim_question.zip
The company has 62 hosts that need to access the internet simultaneously but we just have 6 public IP
addresses from 198.18.32.65 to 198.18.32.70/29 => we have to use NAT overload (or PAT)
Double click on PC1 to access Router1s command line interface
Router1>enable
Router1#configure terminal
Create a NAT pool of global addresses to be allocated with their netmask (notice that /29 = 248)
Router1(config)#ip nat pool mypool 198.18.32.65 198.18.32.70 netmask 255.255.255.248
Create a standard access control list that permits the addresses that are to be translated
Router1(config)#access-list 1 permit 192.168.6.64 0.0.0.63
http://www.9tut.com/57-ccna-nat-sim-question-2
12/7/2015
Page 2 of 11
Establish dynamic source translation, specifying the access list that was defined in the prior step
Router1(config)#ip nat inside source list 1 pool mypool overload
This command translates all source addresses that pass access list 1, which means a source address from
192.168.6.65 to 192.168.6.126, into an address from the pool named mypool (the pool contains
addresses from 198.18.32.65 to 198.18.32.70)
Overload keyword allows to map multiple IP addresses to a single registered IP address (many-to-one)
by using different ports
The question said that appropriate interfaces have been configured for NAT inside and NAT outside
statements.
This is how to configure the NAT inside and NAT outside, just for your understanding:
Router1(config)#interface fa0/0
Router1(config-if)#ip nat inside
Router1(config-if)#exit
Router1(config)#interface s0/0
Router1(config-if)#ip nat outside
Before leaving Router1, you should save the configuration:
Router1(config)#end (or Router1(config-if)#end)
Router1#copy running-config startup-config
Check your configuration by going to PC2 and type:
C:\>ping 192.0.2.114
The ping should work well and you will be replied from 192.0.2.114
Other lab-sims on this site:
CCNA Access List Sim
CCNA NAT SIM Question 1
CCNA Frame Relay Sim
CCNA Configuration SIM Question (RIPv2 SIM)
CCNA VTP SIM
CCNA EIGRP LAB
http://www.9tut.com/57-ccna-nat-sim-question-2
12/7/2015
Page 3 of 11
Comments
Comment pages
Previous 1 13 14 15 35
1. Hitesh
July 26th, 2015
Will NAT sims appear in the exam? What all SIMs shud we prepare for the certification?
2. dean
July 28th, 2015
how to fcuk mlft?
3. Meet
July 30th, 2015
There is a configuration missing in your practice NAT SIM. didnt allocated interface to NAT:
NAT INSIDE AND NAT OUTSIDE.
4. Ccna-user
August 2nd, 2015
@hitesh
Access List Sim
Access List Sim 2
EIGRP Lab Sim
I have not done the CCNA exam yet. Its very likely you will have the 3 Sims I mentioned above.
Everybody will get the Sam simulation activity, but with ACL2 and EIGRP simulations IP
addresses and AS numbers for EIGRP will be different but similar command process.
5. Jayanth
August 18th, 2015
We can also use Dynamic NAT for this sim right ???
6. niel
August 18th, 2015
Hi 9tut! i would just like to ask a questions are questions here are all up to date? are they all
updated weekly? are they updated from time to time?
http://www.9tut.com/57-ccna-nat-sim-question-2
12/7/2015
Page 4 of 11
7. patel
September 11th, 2015
how to download a similar sim to practice in mac laptop ??
8. Marcus
September 29th, 2015
hi!
do i have to use standard access lists or can i use an extended also?
access-list 100 permit ip 192.168.100.0 0.0.0.15 any
how is it on the exam? will this be wrong?
9. H.maki
October 9th, 2015
ping from PC_2 does not work
PC>ping 192.0.2.114
Pinging 192.0.2.114 with 32 bytes of data:
Request timed out.
Request timed out.
Request timed out.
Request timed out.
Ping statistics for 192.0.2.114:
Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
sadly, Nat works fine, still cant figure out why i dont get response from 192.0.2.114 ?
debug ip nat result
router1#
NAT: expiring 198.18.32.65 (192.168.6.79) icmp 41 (41)
NAT: s=192.168.6.79->198.18.32.65, d=192.0.2.114 [47]
und
NAT: s=192.168.6.79->198.18.32.65, d=192.0.2.114 [48]
NAT: s=192.168.6.79->198.18.32.65, d=192.0.2.114 [49]
router1#show ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 198.18.32.65:42 192.168.6.79:42 192.0.2.114:42 192.0.2.114:42
http://www.9tut.com/57-ccna-nat-sim-question-2
12/7/2015
Page 5 of 11
http://www.9tut.com/57-ccna-nat-sim-question-2
12/7/2015
Page 6 of 11
http://www.9tut.com/57-ccna-nat-sim-question-2
12/7/2015
Page 7 of 11
http://www.9tut.com/57-ccna-nat-sim-question-2
12/7/2015
Page 8 of 11
http://www.9tut.com/57-ccna-nat-sim-question-2
12/7/2015
Page 9 of 11
Submit Comment
Premium Membership
Become a member to interact with all questions and read all tutorials, labs!
CCNA 200-120
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
http://www.9tut.com/57-ccna-nat-sim-question-2
12/7/2015
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
z
Page 10 of 11
CCNA Self-Study
z
z
z
Network Resources
z
ICND1/ICND2 Website
CCIE Website
http://www.9tut.com/57-ccna-nat-sim-question-2
12/7/2015
Page 11 of 11
Top
http://www.9tut.com/57-ccna-nat-sim-question-2
12/7/2015