Examkin

Question

Difficulty: HardInside Source NAT and PAT Configuration and Verification

A network engineer is configuring Port Address Translation (PAT) using an IP address pool on a Cisco IOS router. An access list named ACL_LAN (ACL 10) matches internal traffic, and an IP address pool named GIG_POOL has been defined for global addresses. What exact global configuration command completes this PAT configuration by linking access list 10 to GIG_POOL with port overload capability?

Answer: ip nat inside source list 10 pool GIG_POOL overload / ip nat inside source list 10 pool GIG_POOL overload

Answer

ip nat inside source list 10 pool GIG_POOL overload
The command 'ip nat inside source list 10 pool GIG_POOL overload' explicitly binds internal traffic defined by ACL 10 to the public address pool GIG_POOL while enabling port overloading (PAT).

Step-by-Step Solution

1
Identify the standard access list matching inside traffic.
Access list 10 matches internal subnets.
NAT source list parameter requires referencing the defined access list number or name.
2
Identify the target public IP address pool name.
The NAT pool name is specified as GIG_POOL.
The pool keyword requires the exact name of the previously configured IP address pool.
3
Append the port address translation overload keyword.
Adding overload allows multiple inside local addresses to share public IP addresses in the pool using layer 4 port numbers.
Omitting overload configures dynamic one-to-one NAT without port multiplexing, causing address exhaustion when pool IP addresses are fully allocated.

Key Concept

Inside source Port Address Translation (PAT) using an IP address pool requires the overload keyword appended to the 'ip nat inside source list <acl> pool <pool-name>' command.
Rate this question

Topics

Inside Source NAT and PAT Configuration and Verification

More questions from this topic