Section 18 – Review 3

Section 18 Tasks

• Read IP addressing theory notes
• Take the subnetting exam below
• Complete today’s three NAT challenge labs
• Read the ICND1 cram guide
• Spend 15 minutes on the subnetting.org website
• Watch the network design videos on www.in60days.com

Section 18 Exam

1. Which subnet is host 200.200.100.103/27 in?
2. Which subnet is host 190.100.23.45/28 in?
3. Which subnet is host 19.200.12.120/13 in?
4. Which subnet is host 100.123.45.12/15 in?
5. Which subnet is host 130.23.34.3/18 in?
6. Network 192.168.1.0 needs subnetting to create three subnets, each with at least 20 hosts. Which subnet mask needs to be applied? (You need to watch the design videos first.)
7. Network 200.100.1.0 needs subnetting to create five subnets, each with at least 30 hosts. Which subnet mask needs to be applied?
8. Network 30.0.0.0 needs subnetting to create 200 subnets, with as many hosts as possible. Which subnet mask needs to be applied?
9. Network 192.168.1.0 needs subnetting to create subnets that will contain only two hosts. Which subnet mask needs to be applied?
10. Network 170.24.0.0 needs subnetting to create 100 subnets, each with at least 500 hosts. Which subnet mask needs to be applied?

Section 18 Answers

1. 200.200.100.96
2. 190.100.23.32
3. 19.200.0.0
4. 100.122.0.0
5. 130.23.0.0
6. 255.255.255.192
7. 255.255.255.224
8. 255.255.0.0
9. 255.255.255.252
10. 255.255.254.0

Section 18 Lab 1 – Static NAT

Topology

Instructions

Connect two routers together with a serial or crossover cable:

1. Add IP addresses to the routers and a Loopback interface on Router A, according to the diagram; the 172 network can use the default subnet mask
2. Designate NAT inside and outside interfaces
3. Add a static route on Router B to send all traffic back to Router A
4. Ping between Router A and Router B to test the serial line (remember clock rates)
5. Create a static NAT for 172.16.1.1 to 10.1.1.1 and turn on NAT debugging
6. Do an extended ping source from Loopback 0
7. Check the NAT translation table

Solution Hints and Commands

• ip nat inside command and ip nat outside command on the interfaces
• ip route global configuration command to add static route
• Static NAT: ip nat inside source static x.x.x.x y.y.y.y command
• show ip nat translations command to check the NAT translation table

Section 18 Lab 2 – NAT Pool

Topology

Instructions

Connect two routers together with a serial or crossover cable:

1. Add IP addresses to the routers and a Loopback interface on Router A, according to the diagram
2. Designate NAT inside and outside interfaces
3. Add a static route on Router B to send all traffic back to Router A
4. Ping between Router A and Router B to test the serial line (remember clock rates)
5. Create a NAT pool of 10.1.1.1 to 10, inclusive
6. Create two ACL lines to permit the Loopback networks (/16)
7. Configure the NAT pool, using the defined pool and ACL
8. Turn on NAT debugging
9. Source two extended pings, one each from L0 and L1
10. Check the NAT translation table

Solution Hints and Commands

• ip nat inside command and ip nat outside command on the interfaces
• ip route global configuration command to add static route
• ip nat pool name <start_ip> <end_ip> netmask <mask> command
• access-list x permit y.y.y.y command
• ip nat inside source list x pool <name> command
• debug ip nat [detailed] command
• show ip nat translations command to check the NAT translation table

Section 18 Lab 3 – NAT Overload

Topology

Instructions

Connect two routers together with a serial or crossover cable:

1. Add IP addresses to the routers and a Loopback interface on Router A, according to the diagram
2. Designate NAT inside and outside interfaces
3. Add a static route on Router B to send all traffic back to Router A
4. Ping between Router A and Router B to test the serial line (remember clock rates)
5. Create a NAT pool of address 10.1.1.1 only and overload this pool (address)
6. Create two ACL lines to permit the Loopback networks (/16)
7. Configure NAT overload using the defined pool and ACL
8. Turn on NAT debugging
9. Source two extended pings, one each from L0 and L1
10. Check the NAT translation table

Solution Hints and Commands

• Hint: Router(config)#ip nat pool <name> 10.1.1.1 10.1.1.1 prefix-length 24 command
• ip nat inside source list x pool <name> overload command