6.8.1 Packet Tracer - Configure NAT for IPv4

configure not for ipv4 network address translation for ipv4 addressing table three okay r1 r2 r3 pc1 pc2 local server cisco server and outside pc configure dynamic nut with path okay network other translation with port address translation configure static not use a name and access list to permit the addresses from lang 1 land 2 and land 3 to bitter slide okay this is lang 1 this is land 2 and this is land three okay specify the lance in this order okay lang one land two and land three okay use the name r2 not k sensitive the name you use much much this name exactly okay k sensitive okay configure on r2 because r2 is the border router between internet and long networks okay go to r2 command line interface enter enable configure terminal name and access list ip access list okay and use a simple standard access list and standard access list is enough to stand out standard user's name are two not okay sensitive are to not enter and permit plans in this order one two and three one is this 192.168.1024 permit 192.168.1024 wildcard zero zero zero about 255 and land to 180 168 20 00 24. mermaid 192 168 20. that's zero and wild card for 24. and down three 19168 theory that's zero 24. i mean 192 168 seriously that's hero 24 create a not pull name at r2 pool okay you are on standard name and access list configuration mode exit go to global configuration mode and create netpool okay ipnot pull r2 pull r2 pull space the pull should use the first address from 219 165 202 128 prefix field address space okay the first address only the first 128 is the network address and the first host address is 129. only use the first two on i-165 to 129 the first hots address of these networks 128 is the net worth 129 is the first 130 the second and one here the one the broadcast but only use the first 209 165 202 129 again okay from 129 to 129 to use only one and net mask figure d 355.252 adder the pull 9 you used must match this name exactly or to pull exactly all translated addresses must use these others okay only 129 129 configure not with the access control list and network others translation pool that you have created okay you created the access list you created the pool now create the relation between access list and put ipnot inside source list is the name of the list are to not r2 space the pool the name of the pool are to pull r2 pull k sensitive but remember you will use path port address translation okay you are using only one ip address and only one ip address will not be enough for three lungs for three local area networks so that's why use overload overload with path okay end configure static nut to map the local pka server inside address to the second address of 20165 202 128 through the address space okay the local pki server the this is the server local that pka inside this 182 168 20 254 the private ip address with the public ipad is 209 165 202 130. okay remember 128 is the network address 128 is the network address 129 the thirds and 130 the second so use the second for the public outside others okay go to r2 again ip not inside source a static because it's a static nut and inside inside 182 168 20 to 54 space outside two on i-165 202 one theory two nine one sixty five two two one theory and that is enough configure the interfaces that will participate in that okay okay interface serial 0 1 0 the connection to internet is interface outside for not interface here zero one zero enter type not outside outside enter okay this another interface okay the first internet zero zero zero interface on r1 the only one fast ethernet interface faster.net zero zero okay another interfaces are serial interfaces this is the only one for satellite zero zero zero inside format interface facility zero zero zero okay invalid interface okay verify uh and show running coffee okay it's only fast eternal zero zero okay only facetime at zero zero 192 168 21 belongs to this uh this network and fast attack zero zero okay space space space configure terminal interface facetime at 0 0 ip not inside enter this another serial interface is serial zero zero zero the connection to r one serial zero zero zero interface serial zero zero zero i p not inside also inside and this is another interface serial zero zero one the connection to r three interface here zero zero one i p not inside exit and there is only one outside interface the connection to internet and other interfaces in inside okay very nice [Music] verify pc one desktop command prompt ping to cisco server to an i-165 two-on-one theory okay pc one big 209 165 2013 success okay go to pc2 desktop command prompt ping cisco 209 165 201 30 success okay you verify it dynamic nut with path and now verify a static nut how you can verify a static nav access the outside or public ip address of local server from outside pc go to outside pc desktop command prompt being public 209 165 202 130 this public ip address for static outside pc enter success and verify on r2 and privilege excellent mode show type in that translations and you will see this 192.168 figure the tank okay is pc2 pc2 ipl is 180 168 through d10 go to r2 was translated to 219 165 202 129 okay the first ip on the pool the only one ip on the pool four pings okay and outside local and outside global is 209 165 2013 20165 2013 the ip address of the cisco server okay cisco server in all cases and and this another 182 168 20 254 is the ip address of server local server 168 20 to 54 was translated to on i-165 20213 2 on i-165 202 one figure d this is the static nut four pins outside local and outside global 201652 or 140 209 165 2014 the ip address of outside pc 20165 20114 okay 100 thank you very much you

Channel: Christian Augusto Romero Goyzueta

Views: 10,219

Keywords: ensa, enterprise networking, security, automation, ccna, version 7, ccna 7, nat, network address translation, dynamic nat, dynamic, static nat, static

Id: PosSgR7Prns

Length: 13min 28sec (808 seconds)

Published: Fri Aug 21 2020