[Tutorial] How to Configure NAT & PAT on a Cisco Router

Page 1 of 5

LinkBack (1) 06-20-2010, 09:19 AM

Thread Tools

Search this Thread

Display Modes #1 (permalink) Join Date: Jun 2010 Location: India Posts: 10 Rep Power: 13

mark5
Junior How to Configure NAT & PAT on a Cisco Router

Network Routers See the Full Line of Juniper Networks Secure Routers.

Juniper.net/in

Cisco cloud Cisco Data Center Enables Trusted Data Using High Security Solutions.

Cisco.com/Cloud

Network Address Translation (NAT) was introduced to overcome depletion of the public IPv4 addressing problems that occurred with the rapid expansion of the Internet. Basically NAT allows a single network device (e.g a router, firewall etc) to act as an agent between a private local area network and a public network such as the Internet. The purpose of this NAT device is to translate the source IP addresses of the internal network hosts into public routable IP addresses in order to communicate with the Internet. ::Advantages:: * NAT helps to mitigate the depletion of the global public IP address space * Networks can now use the RFC 1918 private address space internally and still have a way to access the Internet using NAT. * NAT increases security by hiding the internal network topology and addressing scheme.

http://www.thestudycamp.com/forum/ccna/18984-how-configure-nat-pat-cisco-router.html

7/12/2011

[Tutorial] How to Configure NAT & PAT on a Cisco Router

Page 2 of 5

Cisco IOS routers support different types of NAT as will be explained below. NAT has many forms and can work in several ways, but in this post I will explain the four most important types of NAT: 1. Overloading or Port Address Translation (PAT) This is the most frequently used form of NAT in IP networks. It uses the concept of many-to-one translation where multiple connections from different internal hosts are multiplexed into a single registered (public) IP address using different source port numbers. This type of NAT allows a maximum of 65,536 internal connections to be translated into a single public IP. This type of NAT is very useful in situations where our ISP has assigned us only a single public IP address, as shown below.

In our scenario above, our internal network range is 192.168.32.0/24 and our assigned public IP address is 213.18.123.100. All internal hosts will be translated to the public address using different port numbers. Configuration: Router(config)# interface ethernet 0 Router(config-if )# ip address 192.168.32.1 255.255.255.0 Router(config-if )# ip nat inside Router(config)# interface serial 0 Router(config-if )# ip address 213.18.123.100 255.255.255.0 Router(config-if )# ip nat outside Router(config)# ip nat pool overloadpool 213.18.123.100 213.18.123.100 prefix-length 24 Router(config)# ip nat inside source list 1 pool overloadpool overload Router(config)# access-list 1 permit 192.168.32.0 0.0.0.255 2. Dynamic NAT Dynamic NAT translates internal private IP addresses to public addresses from a range (pool) of public addresses assigned to our network from an ISP.

In our example scenario above, assume that we own the range of public IP addresses 213.18.123.0/24. Any internal host accessing the internet, will be translated by the NAT router to the first available public IP in the public pool range. In our example above, internal host 192.168.32.10 is translated to 213.18.123.116 (oneto-one mapping). Similarly, 192.168.32.12 is translated to 213.18.123.112 etc. Configuration: Router(config)# interface ethernet 0 Router(config-if )# ip address 192.168.32.1 255.255.255.0 Router(config-if )# ip nat inside

http://www.thestudycamp.com/forum/ccna/18984-how-configure-nat-pat-cisco-router.html

7/12/2011

[Tutorial] How to Configure NAT & PAT on a Cisco Router

Page 3 of 5

Router(config)# interface serial 0 Router(config-if )# ip address 100.100.100.1 255.255.255.252 Router(config-if )# ip nat outside Router(config)# ip nat pool dynamicpool 213.18.123.0 213.18.123.255 prefix-length 24 Router(config)# ip nat inside source list 1 pool dynamicpool Router(config)# access-list 1 permit 192.168.32.0 0.0.0.255 3. Static NAT This form of NAT creates a permanent one-to-one static mapping of a public IP address with a private IP address. It is particularly useful in cases where an internal host needs to be accessible from the outside public internet.

In our example diagram above, the internal host with private IP address 192.168.32.10 will always be translated to 213.18.123.110. Hosts from the outside public internet will be able to directly access the statically nated internal hosts by accessing their mapped public IP address. This scenario is useful to provide access to public company servers such as Web Server, Email Server etc. Configuration: Router(config)# interface ethernet 0 Router(config-if )# ip address 192.168.32.1 255.255.255.0 Router(config-if )# ip nat inside Router(config)# interface serial 0 Router(config-if )# ip address 100.100.100.1 255.255.255.252 Router(config-if )# ip nat outside Router(config)# ip nat inside source static 192.168.32.10 213.18.123.110 Router(config)# ip nat inside source static 192.168.32.12 213.18.123.111 Router(config)# ip nat inside source static 192.168.32.15 213.18.123.112 4. Port Redirection This is useful in situations where we have a single public IP address and we need to use it for accessing two or more internal servers from outside. Assume that we have a Web and Email servers that we need to provide access from outside using only a single public IP address. Assume that our public address is 100.100.100.1. Inbound traffic coming towards address 100.100.100.1 port 80 will be redirected to our internal Web Server 192.168.32.10, and inbound traffic coming towards address 100.100.100.1 port 25 will be redirected to our internal Email Server 192.168.32.20. Configuration: Router(config)# interface ethernet 0 Router(config-if )# ip address 192.168.32.1 255.255.255.0 Router(config-if )# ip nat inside Router(config)# interface serial 0 Router(config-if )# ip address 100.100.100.1 255.255.255.252 Router(config-if )# ip nat outside Router(config)# ip nat inside source static tcp 192.168.32.10 80 100.100.100.1 80 Router(config)# ip nat inside source static tcp 192.168.32.20 25 100.100.100.1 25

http://www.thestudycamp.com/forum/ccna/18984-how-configure-nat-pat-cisco-router.html

7/12/2011

[Tutorial] How to Configure NAT & PAT on a Cisco Router

Page 4 of 5

Troubleshooting commands: Router#show ip nat translation To show the current translations preformed by NAT Router#show ip nat static To show the static translations of NAT Router#debug ip nat To watch the instantaneous interactions of NAT Note: To disable NAT, you need to do the following steps: 1. Disable NAT on the local and global interfaces Router(config-if)#no ip nat inside on the local, and Router(config-if)#no ip nat outside on the global interface. 2. Clear the contents of the translation table, Router#clear ip nat translations 3. Remove the NAT assignment command by preceding it with a no 4. Remove the access-list, if any.
Ads by Google Router IP Cisco Wireless Router Manual Cisco CCNA Cisco Switch Traffic

Download Free Latest Pass4sure Testking Testinside Actualtests Certification Rapidshare vce Exams Quote
Reply

Bookmarks Digg del.icio.us StumbleUpon Google

Tags nat, pat

Secure Networking Routers High-Performance Network Equipment For Your High-Performance Business. Refractometer Your needs are our guidelines! For Laboratory & Process
www.Schmidt-Haensch.com

Juniper.net/in

Complete CCIE Training Over 80 hours of R&S CCIE Training Videos for only $299. Download Now.

www.INE.com/cisco_training

~ I passed CCNA Voice 640-460 today ~ | ~ I passed CCNA 640-802 today ~

LinkBacks (?)
LinkBack to this Thread: http://www.thestudycamp.com/forum/ccna/18984-how-configure-nat-pat-cisco-router.html Posted By For Type Date

http://www.thestudycamp.com/forum/ccna/18984-how-configure-nat-pat-cisco-router.html

7/12/2011

[Tutorial] How to Configure NAT & PAT on a Cisco Router

Page 5 of 5

[Tutorial] How to Configure NAT & PAT on a Cisco Router

This thread

Refback

06-22-2010 07:53 AM

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)

Similar Threads
Thread [Torrent] Cisco Press - 2004 - Cisco Router Firewall Security [1/0] [Torrent] Cisco Pres Cisco - Router Configuration Second Edition(2000) [5/1] [Torrent] Cisco Router Configuration Tutorial [3/4] [Offer] Ciscopress CCNA Router and Switch eSIM Video Tutorial [offer] Cisco Call Manager 4.x Installation Inside Vmware, Video Tutorial Thread Starter ciscofiles Forum Torrents.Cisco Replies 0 Last Post 02-04-2010 02:23 PM 01-19-2010 07:00 AM 09-14-2009 07:10 PM 01-17-2009 06:05 AM 09-07-2007 05:49 PM

ciscofiles

Torrents.Cisco

ciscofiles

Torrents.Cisco

ciscostuff4u

Cisco Study Guides and Requests

ziico

Cisco Study Guides and Requests

All times are GMT. The time now is 03:56 AM. Contact Us - TheStudyCamp - Archive - Top Powered by vBulletin Version 3.7.3 Copyright 2000 - 2011, Jelsoft Enterprises Ltd. SEO by vBSEO 3.2.0 2008, Crawlability, Inc.

Download Free Latest Pass4sure Testking Testinside Actualtests Certification Rapidshare vce Braindumps Exams
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40

http://www.thestudycamp.com/forum/ccna/18984-how-configure-nat-pat-cisco-router.html

7/12/2011