Inside Source NAT and PAT Configuration and Verification
46 soru
A network administrator is configuring Port Address Translation (PAT) on a Cisco IOS router to map internal host traffic matched by access list to the IPv4 address assigned to public WAN interface . The inside and outside interfaces have already been designated using `ip nat inside` and `ip nat outside`, and `access-list 15 permit 172.16.10.0 0.0.0.255` is active. What exact Cisco IOS global configuration command must be entered to complete this Port Address Translation configuration?
A network administrator configures Port Address Translation (PAT) on a Cisco IOS router so that internal hosts on the network can access external services through WAN interface GigabitEthernet0/0/1. The access list and global translation rules are configured as follows:
text
access-list 105 permit ip 10.10.50.0 0.0.0.255 any
ip nat inside source list 105 interface GigabitEthernet0/0/1 overload
During testing, internal clients cannot access external websites, and running `show ip nat translations` produces no output. An inspection of the interface configuration reveals:
text
interface GigabitEthernet0/0/0
description LAN Gateway
ip address 10.10.50.1 255.255.255.0
!
interface GigabitEthernet0/0/1
description WAN Interface
ip address 203.0.113.2 255.255.255.252
ip nat outside
Which configuration step on the router is required to enable successful address translation for the internal clients?
A network administrator is configuring Network Address Translation (NAT) on a Cisco IOS router interface connected to the internal local area network (GigabitEthernet0/0). What exact Cisco IOS interface configuration command designates this interface as the internal side for NAT translation?
A network administrator needs to configure a one-to-one static Network Address Translation (NAT) mapping on a Cisco IOS router. The internal host with private IPv4 address must be statically translated to the public IPv4 address . What exact Cisco IOS global configuration command should be entered to establish this static NAT mapping?
A network administrator needs to configure Port Address Translation (PAT) on a Cisco IOS router so that multiple internal hosts defined in Access Control List 1 can share the IP address assigned to the WAN interface GigabitEthernet0/0/1. Which command correctly completes this configuration?
A network administrator configures dynamic NAT on a Cisco IOS router using an IP pool named `INTERNET_POOL` ( to ) for hosts in the internal network. During testing, users observe that after two internal hosts establish outbound connections, no other internal hosts can access external sites. The output of `show ip nat statistics` shows total translations equal to ( static, dynamic, extended).
Configuration snippet:
text
ip nat pool INTERNET_POOL 198.51.100.1 198.51.100.2 netmask 255.255.255.252
access-list 15 permit 10.20.30.0 0.0.1.255
ip nat inside source list 15 pool INTERNET_POOL
Which TWO statements correctly identify the root cause of this issue and the solution required to allow all internal hosts to translate concurrently? (Select two.)
Geçerli olan tümünü seçin
An administrator examines the following output from a Cisco router after configuring Network Address Translation to map private addresses to a defined address pool:
text
Router# show ip nat statistics
Total active translations: 1 (0 static, 1 dynamic; 0 extended)
Outside interfaces:
GigabitEthernet0/1
Inside interfaces:
GigabitEthernet0/0
Hits: 14 Misses: 0
Dynamic mappings:
-- Inside Source
[id 1] access-list 10 pool NAT_POOL refcount 1
Users on the internal subnet report that only one device at a time can successfully communicate with external networks. Which configuration change will resolve this issue and allow multiple concurrent internal hosts to share the translation pool?
A network administrator is configuring Port Address Translation (PAT) on a Cisco router so that internal hosts on the subnet can access the Internet using the public IP address assigned to the WAN interface . Access List has already been configured to permit traffic from . Which two actions are required to complete this PAT configuration? (Select two.)
Geçerli olan tümünü seçin
A network administrator is implementing Port Address Translation (PAT) using an IP address pool on a Cisco IOS router. Internal devices belong to the private network range. Standard IP access list has already been created to identify inside traffic with the command `access-list 15 permit 172.16.0.0 0.15.255.255`. The public IP addresses assigned by the ISP for translation are through with subnet mask . Which TWO configuration commands must be executed on the router to correctly instantiate the pool and map the inside ACL traffic to allow multiple internal hosts to share these public IP addresses simultaneously?
Geçerli olan tümünü seçin
A network engineer is configuring Port Address Translation (PAT) on a Cisco IOS router using a dynamic NAT pool named ( to ). Internal endpoints reside on the network, which is matched by standard Access Control List 15. Which two configuration actions must be performed on the router to correctly enable PAT for internal hosts and designate interface directionality? (Select two.)
Geçerli olan tümünü seçin
An administrator needs to configure Port Address Translation (PAT) on a Cisco IOS router to allow multiple internal hosts matched by Access Control List 15 to share the single IPv4 address assigned to interface GigabitEthernet0/1 for internet access. Which command correctly enables this configuration?
A network engineer is configuring Port Address Translation (PAT) using an IP address pool on a Cisco IOS router. An access list named ACL_LAN (ACL 10) matches internal traffic, and an IP address pool named GIG_POOL has been defined for global addresses. What exact global configuration command completes this PAT configuration by linking access list 10 to GIG_POOL with port overload capability?
A network administrator is configuring Port Address Translation (PAT) on a Cisco IOS router to allow internal users access to the Internet using a single public IP address assigned to the GigabitEthernet0/1 interface. The administrator has already configured the Access Control List (ACL) and the inside/outside interfaces. What exact Cisco IOS keyword must be appended to the end of the 'ip nat inside source list 1 interface GigabitEthernet0/1' command to enable port-level address translation?
An enterprise router is configured for dynamic Network Address Translation (NAT) using an IP pool containing four public IP addresses ( to ). Internal users report that only four devices can access external resources at any given time, and subsequent connection attempts by other hosts fail until an existing session terminates. Which configuration change will allow all internal hosts to share the public IP address pool simultaneously?
An administrator notices that while the first host on the internal network () can access the internet, subsequent hosts are unable to establish outbound connections simultaneously. Inspecting Router1 reveals the following running configuration:
text
access-list 105 permit ip 10.1.10.0 0.0.0.255 any
ip nat pool EDGE_POOL 203.0.113.5 203.0.113.5 prefix-length 32
ip nat inside source list 105 pool EDGE_POOL
Command output from `show ip nat statistics` confirms:
text
Total active translations: 1 (0 static, 1 dynamic, 0 extended)
Outside interfaces: GigabitEthernet0/1
Inside interfaces: GigabitEthernet0/0
Hits: 142 Misses: 18
Dynamic mappings:
-- Inside Source
access-list 105 pool EDGE_POOL ref count 1
Which configuration modification must be applied to Router1 to allow all internal hosts on the network to share the single IP address assigned to `EDGE_POOL` concurrently?
A network administrator is implementing Port Address Translation (PAT) on a Cisco IOS router to allow hosts on the internal subnet to access the Internet. The WAN interface GigabitEthernet0/0/1 receives its dynamic IP address from the ISP, while interface GigabitEthernet0/0/0 connects to the internal LAN. Which two configuration steps or commands are required to successfully enable PAT using the WAN interface address? (Select TWO options.)
Geçerli olan tümünü seçin
A network administrator is configuring Port Address Translation (PAT) on a Cisco IOS router to allow internal hosts in the subnet to access the Internet using the public IP address on interface GigabitEthernet0/0/0. Internal users report that they cannot establish any outbound internet connections. The running configuration reveals the following details:
interface GigabitEthernet0/0/0
ip address 203.0.113.1 255.255.255.248
ip nat outside
!
interface GigabitEthernet0/0/1
ip address 172.16.50.1 255.255.255.0
!
ip access-list standard NAT_ACL
permit 172.16.50.0 0.0.0.255
!
ip nat inside source list NAT_ACL interface GigabitEthernet0/0/0 overload
Which configuration change must be made on the router to resolve this issue?
A network engineer is tasking a Cisco IOS router with Port Address Translation (PAT) to enable Internet access for internal endpoints on the network using the public IPv4 address assigned to interface GigabitEthernet0/0/1. Which two configuration steps are required on the router to accomplish this requirement? (Select two.)
Geçerli olan tümünü seçin
An administrator needs to verify active Port Address Translation (PAT) sessions on a Cisco IOS router to inspect how inside local IP addresses and source port numbers are mapped to inside global addresses and translated port numbers. What exact Cisco IOS command displays the active NAT translation table?
A network engineer is configuring Port Address Translation (PAT) on a Cisco IOS router to allow hosts on the internal private subnet to access the Internet using the router's WAN interface . An Access Control List (ACL 10) has already been created to permit traffic from . Which two configuration steps are required on the router to complete this setup?
Geçerli olan tümünü seçin