CCNA NAT Simulation

A network associate is configuring a router for the Weaver company to provide internet access. The ISP has provided the company six public IP addresses of 198.18.184.105 - 198.18.184.110. The company has 14 hosts that need to access the internet simultaneously. The hosts in the company LAN have been assigned private space addresses in the range of 192.168.100.17 – 192.168.100.30.

natq

The following have already been configured on the router:

  • The basic router configuration
  • The appropriate interfaces have been configured for NAT inside and NAT outside
  • The appropriate static routes have also been configured (since the company will be a stub network, no routing protocol will be required.)
  • All passwords have been temporarily set to “cisco”



The task is to complete the NAT configuration using all IP addresses assigned by the ISP to provide internet access for the hosts in the weaver LAN. Functionality can be tested by clicking on the host provided for testing.

Configuration information:

Router name - Weaver
Inside global addresses - 198.18.184.105 – 198.18.184.110 /29
Inside local addresses - 192.168.100.17 – 192.168.100.30 /28
Number of inside hosts - 14


Answer :

Step 1: Router Name

Router>enable
Router#configure terminal
Router(config)#hostname Weaver
Weaver(config)#


Step 2: NAT Configuration

Weaver(config)#access-list 10 permit 192.168.100.16 0.0.0.15
Weaver(config)#ip nat pool  mynatpool 198.18.184.105 198.18.184.110 netmask 255.255.255.248
Weaver(config)#ip nat inside source list 10 pool mynatpool overload
Weaver(config)#end


Step 3: Save Configuration

Weaver#copy run start



Verification:

We can verify the answer by pinging the ISP IP Address (192.0.2.114) from Host for testing.

Click “Host for testing”

In command prompt, type “ping 192.0.2.114”. If ping succeeded then the NAT is working properly.


Screen Shots:

nat1


nat2


nat3





To download this Lab: https://app.box.com/s/ljdgzhhzaubocmmutjje

7 Responses so far.

  1. Anonymous says:

    thanks for your help i'm not sure but i guess you forgot add Router1(config)#interface fa0/0

    Weaver(config-if)#ip nat inside

    Weave(config-if)#exit

    Weave(config)#interface s0/0

    Weave(config-if)#ip nat outside

  2. Adi says:

    Hello Guys I hope you will be fine there.Now New CCNA (200-120) and CCNA security (640-554) Vouchers on special discount of 58% for World wide, with six months expiry date till you purchase. Each voucher cost 70USD.

    Details Required For CCNA Voucher For Discount Processing:

    1-Full Name. 1st Name & Last Name (as you want to appear on certificate & documents)
    2-Country.
    3-City.
    4-State.
    5-Pin Code (or Area Code)
    6-Residential Address (or where you can collect your Certificate or further correspondence
    can be received)
    7-Date of birth
    Add me on Skype through this information which is written below:
    Skype Name: rockon660
    you can also email me at this email address which is written below:
    madeelqaiser@gmail.com
    If you have any Questions feel free to contact me.

    Thanks,
    Best regards,
    Adeel

  3. Anonymous says:
    This comment has been removed by a blog administrator.
  4. please, how can I download this simulation?

  5. Anonymous says:

    No need for the ip nat inside/ip nat outside command
    Question it self says appropriate NAT commands applied at the interface.

  6. Adi says:

    Hello Guys good news for you that CCNA discounted and Microsoft vouchers are now available. Now New CCNA (200-120) vouchers on special discount of 58% for World wide, with six months expiry date till you purchase.

    Details Required For CCNA Voucher For Discount Processing:

    1-First Name.
    Last Name. (as your name written in your National Identity card)
    2-Country.
    3-City.
    4-State.
    5-Pin Code (or Area Code)
    6-Residential Address (or where you can collect your Certificate or further correspondence
    can be received)
    7-Date of birth
    Add me on Skype through this information which is written below:
    Skype Name: rockon660
    you can also email me at this email address which is written below:
    madeelqaiser@gmail.com
    If you have any Questions feel free to contact me.

    Thanks,
    Best regards,
    Adeel

  7. Anonymous says:

    in the testing host, please change the default gateway to 255.255.255.240 not 255.255.255.0 this was an issue. Another thing to test the nat is to see the translation "sh ip nat tran" and "sh ip nat stat" to see live translation: 1. enable debug nat "debug ip nat" 2. ping the ISP from the host and you should see the translation it is a PAT. Thank you very much for this snack lab. Michael Flutie.

Leave a Reply

Popular Posts