Examkin

Soru

Zorluk: ZorInside Source NAT and PAT Configuration and Verification

A network administrator is implementing Port Address Translation (PAT) on a Cisco IOS router to allow hosts on the internal subnet 10.45.10.0/2410.45.10.0/24 to access the Internet. The WAN interface GigabitEthernet0/0/1 receives its dynamic IP address from the ISP, while interface GigabitEthernet0/0/0 connects to the internal LAN. Which two configuration steps or commands are required to successfully enable PAT using the WAN interface address? (Select TWO options.)

  1. Specify the translation mapping using the command ip nat inside source list 1 interface GigabitEthernet0/0/1 overloadCevap
  2. Identify NAT roles on the router interfaces by configuring ip nat inside on GigabitEthernet0/0/0 and ip nat outside on GigabitEthernet0/0/1Cevap
  3. C
    Specify the translation mapping using the command ip nat inside source list 1 interface GigabitEthernet0/0/1 without the overload keyword
  4. D
    Define an Access Control List that permits internal traffic using a wildcard mask of access-list 1 permit 172.32.10.0 0.0.0.255

Cevap

Port Address Translation (PAT) using a router interface requires defining the internal and external NAT interface designations (ip nat inside / ip nat outside) and creating the NAT statement referencing the matching ACL and interface with the overload keyword (ip nat inside source list 1 interface GigabitEthernet0/0/1 overload).
To successfully establish Port Address Translation (PAT) using an interface address, two mandatory requirements must be fulfilled: defining the NAT boundary interface roles (ip nat inside on the LAN side and ip nat outside on the WAN side) and writing the translation command linking the matching ACL to the WAN interface with the overload keyword present.

Adım Adım Çözüm

1
Designate the internal and external NAT interfaces.
GigabitEthernet0/0/0 is configured with ip nat inside and GigabitEthernet0/0/1 is configured with ip nat outside.
Cisco IOS NAT needs to identify ingress and egress traffic boundaries to know when to apply translation rules.
2
Define an access list matching the internal subnet traffic.
Standard ACL permits 10.45.10.0 0.0.0.255.
The ACL acts as the interesting traffic filter to identify packets eligible for translation.
3
Configure the inside source PAT statement using the interface and overload keywords.
Command ip nat inside source list 1 interface GigabitEthernet0/0/1 overload is applied.
The overload keyword instructs Cisco IOS to track layer 4 TCP/UDP port numbers, enabling thousands of internal hosts to share one public IP address.

Anahtar Kavram

Inside Source PAT Configuration
Tahmini Süre:2m 0s
Bu soruyu puanla

Konular

Inside Source NAT and PAT Configuration and Verification

Bu konudan daha fazla soru