A network engineer is troubleshooting an issue where only the first internal user from subnet can access external destinations at any given time. The Cisco IOS router configuration and verification command output are shown below:
text
ip nat pool OUTSIDE_POOL 203.0.113.50 203.0.113.50 netmask 255.255.255.248
ip nat inside source list 10 pool OUTSIDE_POOL
!
access-list 10 permit 192.168.10.0 0.0.0.255
text
Router# show ip nat statistics
Total active translations: 1 (0 static, 1 dynamic, 0 extended)
Hits: 412 Misses: 15
Expired translations: 12
Dynamic mappings:
-- Inside Source
access-list 10 pool OUTSIDE_POOL refCount 1
Which configuration change is required to allow multiple internal hosts to share the single pool IP address simultaneously?
- Append the overload keyword to the statement ip nat inside source list 10 pool OUTSIDE_POOL.Cevap
- BChange access-list 10 to permit traffic from the public range 172.32.10.0 0.0.0.255 instead of the current subnet.
- CConfigure ip helper-address 203.0.113.50 on the internal gateway interface to forward NAT translation requests.
- DSet an administrative distance of 210 on the dynamic NAT pool to ensure translated packets take priority.
Cevap
Append the overload keyword to the statement ip nat inside source list 10 pool OUTSIDE_POOL.
Without the 'overload' keyword, Cisco IOS implements basic dynamic NAT, mapping inside local IP addresses to inside global IP addresses on a strict one-to-one basis. Because the defined NAT pool has only one IP address (203.0.113.50), only one internal device can translate its IP address at any given time, as confirmed by 'Total active translations: 1 (0 static, 1 dynamic, 0 extended)' in the output. Appending 'overload' converts dynamic NAT into Port Address Translation (PAT), allowing multiple inside hosts to share the single public IP address concurrently using unique source L4 port numbers.
Adım Adım Çözüm
Anahtar Kavram
Port Address Translation (PAT) Overload Keyword Configuration