Soru

Zorluk: OrtaInside Source NAT and PAT Configuration and Verification

A network engineer is tasking a Cisco IOS router with Port Address Translation (PAT) to enable Internet access for internal endpoints on the 192.168.20.0/24192.168.20.0/24 network using the public IPv4 address assigned to interface GigabitEthernet0/0/1. Which two configuration steps are required on the router to accomplish this requirement? (Select two.)

  1. Define an IPv4 Access Control List (ACL) that permits traffic originating from the internal 192.168.20.0/24192.168.20.0/24 subnet.Cevap
  2. Execute the global configuration command `ip nat inside source list <ACL> interface GigabitEthernet0/0/1 overload`.Cevap
  3. C
    Execute the global configuration command `ip nat inside source list <ACL> interface GigabitEthernet0/0/1` without the `overload` keyword.
  4. D
    Define an Access Control List (ACL) matching destination range 172.32.0.0/12172.32.0.0/12 to classify private local endpoints.

Cevap

To configure interface-based PAT (overload) on Cisco IOS, an administrator must define an ACL identifying the inside local host network and bind that ACL to the outside WAN interface using `ip nat inside source list <ACL> interface <interface-id> overload`.
Configuring interface-based Port Address Translation (PAT) requires creating an ACL that permits internal host addresses (192.168.20.0/24192.168.20.0/24) and linking that ACL to the egress interface with `ip nat inside source list <ACL> interface GigabitEthernet0/0/1 overload`. The `overload` keyword is mandatory to enable layer 4 port tracking so multiple hosts can share one IP.

Adım Adım Çözüm

1
Identify the internal host network requiring translation.
Internal subnet is identified as 192.168.20.0/24192.168.20.0/24.
An Access Control List (ACL) must be configured to match traffic coming from 192.168.20.0/24192.168.20.0/24.
2
Bind the matching ACL to the external interface using PAT.
The command `ip nat inside source list <ACL> interface GigabitEthernet0/0/1 overload` is configured.
The `overload` keyword allows multiple internal hosts to share the single interface IP address by tracking unique L4 port numbers.

Anahtar Kavram

Port Address Translation (PAT) interface overload configuration
Bu soruyu puanla