Question

Difficulty: EasyInside Source NAT and PAT Configuration and Verification

A network administrator needs to configure Port Address Translation (PAT) on a Cisco IOS router so that multiple internal hosts defined in Access Control List 1 can share the IP address assigned to the WAN interface GigabitEthernet0/0/1. Which command correctly completes this configuration?

  1. ip nat inside source list 1 interface GigabitEthernet0/0/1 overloadAnswer
  2. B
    ip nat inside source list 1 interface GigabitEthernet0/0/1
  3. C
    ip nat outside source list 1 interface GigabitEthernet0/0/1 overload
  4. D
    ip nat inside source static list 1 interface GigabitEthernet0/0/1 overload

Answer

The command 'ip nat inside source list 1 interface GigabitEthernet0/0/1 overload' correctly enables Port Address Translation (PAT) using the router's exit interface IP address.
The correct choice utilizes the 'ip nat inside source list 1 interface GigabitEthernet0/0/1 overload' command. This properly specifies that internal traffic matching access list 1 should be translated to the public IP assigned to interface GigabitEthernet0/0/1, while the 'overload' keyword enables Port Address Translation (PAT) so multiple hosts can share that single address via port multiplexing.

Step-by-Step Solution

1
Identify the requirement for interface-based PAT (Port Address Translation).
Dynamic translation for multiple hosts using a single interface IP requires referencing the inside source list, the outside interface name, and the 'overload' keyword.
The 'overload' keyword instructs the router to track unique source port numbers so multiple internal IP addresses can share one public IP address.
2
Evaluate the syntax structure of Cisco IOS NAT commands.
The correct global configuration command syntax is 'ip nat inside source list <acl-number> interface <interface-id> overload'.
This binds the matching ACL to the specified interface and enables port multiplexing.

Key Concept

Port Address Translation (PAT) Interface Overload Configuration
Rate this question