Examkin

Soru

Zorluk: OrtaInside Source NAT and PAT Configuration and Verification

An administrator needs to configure Port Address Translation (PAT) on a Cisco IOS router so that all internal hosts on the subnet 172.16.50.0/24172.16.50.0/24 can access the Internet using the IPv4 address assigned to the WAN interface GigabitEthernet0/1. Interface GigabitEthernet0/0 connects to the internal LAN. Which configuration set correctly accomplishes this requirement?

  1. interface GigabitEthernet0/0
    ip nat inside
    !
    interface GigabitEthernet0/1
    ip nat outside
    !
    access-list 15 permit 172.16.50.0 0.0.0.255
    ip nat inside source list 15 interface GigabitEthernet0/1 overload    Cevap
  2. B
    interface GigabitEthernet0/0
    ip nat inside
    !
    interface GigabitEthernet0/1
    ip nat outside
    !
    access-list 15 permit 172.16.50.0 0.0.0.255
    ip nat inside source list 15 interface GigabitEthernet0/1
  3. C
    interface GigabitEthernet0/0
    ip nat inside
    !
    interface GigabitEthernet0/1
    ip nat outside
    !
    access-list 15 permit 172.32.50.0 0.0.0.255
    ip nat inside source list 15 interface GigabitEthernet0/1 overload
  4. D
    interface GigabitEthernet0/0
    ip nat outside
    !
    interface GigabitEthernet0/1
    ip nat inside
    !
    access-list 15 permit 172.16.50.0 0.0.0.255
    ip nat inside source list 15 interface GigabitEthernet0/1 overload

Cevap

The command sequence configuring GigabitEthernet0/0 as ip nat inside, GigabitEthernet0/1 as ip nat outside, ACL 15 matching 172.16.50.0 0.0.0.255, and 'ip nat inside source list 15 interface GigabitEthernet0/1 overload' correctly enables PAT.
The correct command set properly sets GigabitEthernet0/0 as the inside interface and GigabitEthernet0/1 as the outside interface, specifies standard ACL 15 to match the 172.16.50.0/24 subnet, and uses the 'overload' keyword with the egress interface to enable Port Address Translation (PAT).

Adım Adım Çözüm

1
Identify and designate the NAT interfaces
GigabitEthernet0/0 is configured with 'ip nat inside' (internal LAN) and GigabitEthernet0/1 is configured with 'ip nat outside' (WAN interface).
Cisco IOS NAT requires specifying directionality on interfaces to know where translation occurs.
2
Define an Access Control List (ACL) matching internal private IPs
Access-list 15 matches subnet 172.16.50.0 with wildcard mask 0.0.0.255.
The ACL identifies which internal source IP addresses are eligible for address translation.
3
Configure PAT using interface overloading
Execute 'ip nat inside source list 15 interface GigabitEthernet0/1 overload'.
The 'overload' keyword enables Port Address Translation (PAT), allowing multiple internal hosts to share the single IP address assigned to the egress interface by tracking layer 4 port numbers.

Anahtar Kavram

Port Address Translation (PAT) Configuration using Interface Overload
Tahmini Süre:1m 15s
Bu soruyu puanla

Konular

Inside Source NAT and PAT Configuration and Verification

Bu konudan daha fazla soru