Examkin

Question

Difficulty: EasyInside Source NAT and PAT Configuration and Verification

A network administrator is configuring Port Address Translation (PAT) on a Cisco router so that internal hosts on the 10.1.1.0/2410.1.1.0/24 subnet can access the Internet using the public IP address assigned to the WAN interface GigabitEthernet0/0/1GigabitEthernet0/0/1. Access List 11 has already been configured to permit traffic from 10.1.1.0/2410.1.1.0/24. Which two actions are required to complete this PAT configuration? (Select two.)

  1. Configure the command `ip nat inside source list 1 interface GigabitEthernet0/0/1 overload` in global configuration mode.Answer
  2. B
    Configure the command `ip nat inside source list 1 interface GigabitEthernet0/0/1` in global configuration mode.
  3. Apply the command `ip nat inside` under the interface connected to the internal LAN.Answer
  4. D
    Configure Access List 11 to match public IPv4 addresses in the 172.32.0.0/16172.32.0.0/16 range.

Answer

To complete PAT using an exit interface IP address, the administrator must designate the LAN interface with `ip nat inside` and configure the global translation statement `ip nat inside source list 1 interface GigabitEthernet0/0/1 overload`.
Port Address Translation (PAT) using an exit interface requires defining the internal interface with `ip nat inside` and executing `ip nat inside source list <acl> interface <interface> overload` globally. The `overload` keyword ensures multiple internal hosts can share the single public IP address by assigning unique source ports to each session.

Step-by-Step Solution

1
Identify the internal boundary interface and assign the NAT role.
Apply `ip nat inside` on the LAN interface connected to internal hosts.
Cisco IOS requires identifying inside and outside interfaces so it knows which packets trigger NAT processing.
2
Configure the global PAT source translation statement with interface overload.
Enter `ip nat inside source list 1 interface GigabitEthernet0/0/1 overload` in global configuration mode.
The `overload` keyword enables Port Address Translation (PAT), allowing multiple internal private IP addresses to share a single public IP address using distinct TCP/UDP port numbers.

Key Concept

Inside Source Port Address Translation (PAT) Interface Overload Configuration
Estimated Time:1m 0s
Rate this question

Topics

Inside Source NAT and PAT Configuration and Verification

More questions from this topic