CCNA NAT Configuration
CCNA NAT Configuration
These blocks of addresses can be used by multiple organizations for their private networks but they
are not routable on the Internet. For hosts with these addresses that need to access the Internet a
device must be deployed at the edge of the network that performs address translation to unique public
addresses.
Network Address Translation (NAT) is used to translate Private IP addresses from the reserved
private address space defined in RFC 1918 to Public IPv4 addresses which are routable on the
Internet. NAT is usually implemented on a router that sits at the edge connecting a private network on
side and the public network (Internet) on the other side. There are various types of NAT but in this
lesson we will focus on the following three types of NAT.
Dynamic NAT is used translate group of private IP addresses to a pool of Public IP addresses.
Dynamic NAT also establishes one-to-one mapping between private and public IP address but the
translation will be temporary and after the connectivity is not required the translation will be removed
and the public IP address will be returned to the pool and which can then be used to translate any
other private host.
Port Address Translation is used to translate multiple private IP addresses to a single public IP
address. To keep each translation unique a private IP address and source port is translated to Public
IP address and mapped port.
NAT Terminologies
Nat Configuration
We will use the network in the figure below to demonstrate the configuration of Static, Dynamic NAT
and PAT.
We will configure the Cisco Router to perform Static NAT on the IP address 10.1.1.200 owned by
Web Server and Dynamic NAT to translate the IP addresses of three hosts to dynamically to a pool of
addresses.
— The command above configures static NAT for private IP address 10.1.1.200 to public IP address
116.100.100.195 —
— The commands above configure Dynamic NAT for a group three hosts which are assigned public
IP addresses from a pool of three public IP addesses —
We can also configure Port Address Translation for the three hosts such that all three of them will be
overloaded to a single IP address. To configure PAT use the following command
Router(config)ip nat inside source list 101 interface fastethernet 0/1 overload
Today we covered Network Address Translation and configuration, NAT is a very important lesson
and students must have thorough conceptual and practical knowledge of NAT as almost all enterprise
networks connected to the Internet use NAT.