9.4.1.1 NAT Check - Instructions Answers

Certification Answers

9.4.1.1 NAT Check (Instructor Version – Optional Lab)

Instructor Note: Red font color or gray highlights indicate text that appears in the instructor copy only. Optional activities are designed to enhance understanding and/or to provide additional practice.

Objective

Configure, verify and analyze static NAT, dynamic NAT and NAT with overloading.

Instructor Note: This activity can be completed individually or in small or large groups.

Scenario

Network address translation is not currently included in your company’s network design. It has been decided to configure some devices to use NAT services for connecting to the mail server.

Before deploying NAT live on the network, you prototype it using a network simulation program.

Resources

  • Packet Tracer software
  • Word processing or presentation software

Directions

Step 1: Create a very small network topology using Packet Tracer, including, at minimum:

a. Two 1941 routers, interconnected

b. Two LAN switches, one per router

c. One mail server, connected to the LAN on one router

d. One PC or laptop, connected the LAN on the other router

Step 2: Address the topology.

a. Use private addressing for all networks, hosts, and device.

b. DHCP addressing of the PC or laptop is optional.

c. Static addressing of the mail server is mandatory.

Step 3: Configure a routing protocol for the network.
Step 4: Validate full network connectivity without NAT services.

a. Ping from one end of the topology and back to ensure the network is functioning fully.

b. Troubleshoot and correct any problems preventing full network functionality.

Step 5: Configure NAT services on either router from the host PC or laptop to the mail server
Step 6: Produce output validating NAT operations on the simulated network.

a. Use the show ip nat statistics, show access-lists, and show ip nat translations commands to gather information about NAT’s operation on the router

b. Copy and paste or save screenshots of the topology and output information to a word processing or presentation document.

Step 7: Explain the NAT design and output to another group or to the class.

Suggested Activity

R2# show ip nat translations
Pro Inside global    Inside local    Outside local   Outside global
icmp 192.168.1.1:2   192.168.1.2:2   192.168.3.2:2   192.168.3.2:2
R2# show ip nat statistics
Total translations: 1 (0 static, 1 dynamic, 1 extended)
Outside Interfaces: GigabitEthernet0/0
Inside Interfaces: Serial0/0/0
Hits: 2 Misses: 5
Expired translations: 2
Dynamic mappings:
-- Inside Source
access-list 1 pool R1 refCount 1
pool R1: netmask 255.255.255.0
   start 192.168.1.1 end 192.168.1.254
   type generic, total addresses 254 , allocated 1 (0%), misses 0
R2# show access-lists
Standard IP access list 1
 permit 192.168.1.0 0.0.0.255 (6 match(es))

Identify elements of the model that map to IT-related content:

NAT

1. Configuration
2. Operation
3. Troubleshooting