9.4.1.1 NAT Check (Instructor Version – Optional Lab)
Instructor Note: Red font color or gray highlights indicate text that appears in the instructor copy only. Optional activities are designed to enhance understanding and/or to provide additional practice.
Objective
Configure, verify and analyze static NAT, dynamic NAT and NAT with overloading.
Instructor Note: This activity can be completed individually or in small or large groups.
Scenario
Network address translation is not currently included in your company’s network design. It has been decided to configure some devices to use NAT services for connecting to the mail server.
Before deploying NAT live on the network, you prototype it using a network simulation program.
Resources
- Packet Tracer software
- Word processing or presentation software
Directions
Step 1: Create a very small network topology using Packet Tracer, including, at minimum:
a. Two 1941 routers, interconnected
b. Two LAN switches, one per router
c. One mail server, connected to the LAN on one router
d. One PC or laptop, connected the LAN on the other router
Step 2: Address the topology.
a. Use private addressing for all networks, hosts, and device.
b. DHCP addressing of the PC or laptop is optional.
c. Static addressing of the mail server is mandatory.
Step 3: Configure a routing protocol for the network.
Step 4: Validate full network connectivity without NAT services.
a. Ping from one end of the topology and back to ensure the network is functioning fully.
b. Troubleshoot and correct any problems preventing full network functionality.
Step 5: Configure NAT services on either router from the host PC or laptop to the mail server
Step 6: Produce output validating NAT operations on the simulated network.
a. Use the show ip nat statistics, show access-lists, and show ip nat translations commands to gather information about NAT’s operation on the router
b. Copy and paste or save screenshots of the topology and output information to a word processing or presentation document.
Step 7: Explain the NAT design and output to another group or to the class.
Suggested Activity Example (student designs will vary):
NAT Topology Diagram
R2# show ip nat translations Pro Inside global Inside local Outside local Outside global icmp 192.168.1.1:2 192.168.1.2:2 192.168.3.2:2 192.168.3.2:2
R2# show ip nat statistics Total translations: 1 (0 static, 1 dynamic, 1 extended) Outside Interfaces: GigabitEthernet0/0 Inside Interfaces: Serial0/0/0 Hits: 2 Misses: 5 Expired translations: 2 Dynamic mappings: -- Inside Source access-list 1 pool R1 refCount 1 pool R1: netmask 255.255.255.0 start 192.168.1.1 end 192.168.1.254 type generic, total addresses 254 , allocated 1 (0%), misses 0
R2# show access-lists Standard IP access list 1 permit 192.168.1.0 0.0.0.255 (6 match(es))
Identify elements of the model that map to IT-related content:
NAT
1. Configuration
2. Operation
3. Troubleshooting