A network administrator configures dynamic NAT on a Cisco IOS router to enable hosts on the internal network to reach the Internet using an address pool defined as to . After deployment, only two internal hosts can access external servers at any given time. Subsequent connection attempts from other internal hosts fail until one of the active hosts disconnects. Verification with the command `show ip nat translations` shows exactly two active entries without any transport layer port numbers listed. Which configuration change must be made on the router to allow all internal hosts to access external resources simultaneously?
- Append the `overload` keyword to the `ip nat inside source list` configuration command.Answer
- BModify the referenced access control list to match the public IP range instead of the private subnet.
- CReplace the dynamic NAT pool configuration with explicit static `ip nat inside source static` mapping statements for each internal host.
- DChange the NAT pool mask to a prefix length to expand host address allocation.
Answer
Appending the `overload` keyword to the `ip nat inside source list` command enables Port Address Translation (PAT), allowing multiple internal private IP addresses to share the public addresses in the pool by tracking unique source port numbers.
Omitting the `overload` keyword in a dynamic NAT pool configuration limits Cisco IOS to standard dynamic 1-to-1 address mappings. Because the public pool contains only two IP addresses, the first two active internal hosts occupy the entire pool. Appending the `overload` keyword enables Port Address Translation (PAT), allowing multiple inside local addresses to be multiplexed over the same inside global addresses using unique Layer 4 port numbers.
Step-by-Step Solution
Key Concept
Port Address Translation (PAT) Overload Keyword Requirement