Soru

Zorluk: OrtaInside Source NAT and PAT Configuration and Verification

A network engineer is configuring Port Address Translation (PAT) on a Cisco IOS router to allow hosts on the internal private subnet 10.10.5.0/2410.10.5.0/24 to access the Internet using the router's WAN interface GigabitEthernet0/1GigabitEthernet0/1. An Access Control List (ACL 10) has already been created to permit traffic from 10.10.5.0/2410.10.5.0/24. Which two configuration steps are required on the router to complete this setup?

  1. Apply the command ip nat inside on the local LAN interface and ip nat outside on interface GigabitEthernet0/1.Cevap
  2. Issue the global configuration command ip nat inside source list 10 interface GigabitEthernet0/1 overload.Cevap
  3. C
    Issue the global configuration command ip nat inside source list 10 interface GigabitEthernet0/1.
  4. D
    Configure access-list 10 permit 172.32.5.0 0.0.0.255 to identify the private host network.

Cevap

The required steps are designating the LAN interface as inside and WAN interface as outside, and issuing the global command ip nat inside source list 10 interface GigabitEthernet0/1 overload.
To successfully establish Port Address Translation (PAT) using a router's exit interface, interfaces must be marked correctly as inside/outside boundaries, and the global NAT translation rule must reference the matching ACL along with the outside interface name and the essential 'overload' parameter.

Adım Adım Çözüm

1
Identify and configure NAT interface roles
The internal interface facing 10.10.5.0/24 is designated with 'ip nat inside', and the WAN interface GigabitEthernet0/1 is designated with 'ip nat outside'.
Cisco IOS requires traffic boundaries to be designated so it knows where translation must take place.
2
Configure the global PAT translation rule
Execute 'ip nat inside source list 10 interface GigabitEthernet0/1 overload'.
The 'overload' keyword instructs the router to translate multiple private source IP addresses onto the single IP assigned to GigabitEthernet0/1 by tracking unique source port numbers.

Anahtar Kavram

Port Address Translation (PAT) Interface Designation and Overload Syntax
Bu soruyu puanla