8 Nat
8 Nat
Network Address
Translations (NAT)
Network Address Translations (NAT)
• Translates Private IP to Public and vice versa
• Used for Internet connectivity
Types of IP
• Public IP
– Internet
– Can pass through public Internet
• Private IP
– LAN
– Cannot pass through public Internet
Private IP
Class Range
A 10.0.0.0 to 10.255.255.255
B 172.16.0.0 to 172.31.255.255
C 192.168.0.0 to 192.168.255.255
NAT STEP 1
NAT STEP 2
NAT Step 3
NAT Step 4
Types of NAT
• Static NAT
• Dynamic NAT
• Port Address Translations (PAT)
Static NAT
• One to one mapping
• For every host, we have to manually create a
Public IP mapping
Static NAT
myRouter>en
myRouter#conf t
myRouter(config)#ip nat inside source static <private_ip>
<public_ip>
myRouter(config)#end
Static NAT
myRouter>en
myRouter#conf t
myRouter(config)#ip nat inside source static 10.0.0.1 200.200.200.33
myRouter(config)#ip nat inside source static 10.0.0.2 200.200.200.34
myRouter(config)#ip nat inside source static 10.0.0.3 200.200.200.35
myRouter(config)#end
myRouter#
Verify
NAT Binding
• Inside Binding
– Used in interface connects to LAN
• Outside Binding
– Used in Interface connects to Internet
NAT Binding
myRouter(config)#int fa0/0
myRouter(config-if)#ip nat inside
myRouter(config-if)#exit
myRouter(config)#int s0/0
myRouter(config-if)#ip nat outside
myRouter(config-if)#end
Dynamic NAT
• Many host to Many Public IP mapping
– Example: 10 hosts = 10 Public IP
• Automatically map each host to available
public IP address
Dynamic NAT
1. Specify Private IP Addresses
access-list #
2. Specify Public IP Addresses
ip nat pool x
3. Link ❶ and ❷
ip nat inside source list # pool x
Syntax
Router>en
Router#conf t
Router(config)#access-list <ACL No.> permit
<network_address> <wildcard_mask>
Router(config)#ip nat pool <word> <starting_ip> <ending_ip>
netmask <subnet_mask>
Router(config)#ip nat inside source list <ACL No.> pool <word>
Router(config)#end
NAT Configuration
myRouter>en
myRouter#conf t
myRouter(config)#access-list 40 permit 10.0.0.0 0.255.255.255
myRouter(config)#ip nat pool abcd 200.200.200.33
200.200.200.38 netmask 255.255.255.248
myRouter(config)#ip nat inside source list 40 pool abcd
myRouter(config)#end
NAT Binding
myRouter(config)#int fa0/0
myRouter(config-if)#ip nat inside
myRouter(config-if)#exit
myRouter(config)#int s0/0
myRouter(config-if)#ip nat outside
myRouter(config-if)#end
Port Address Translations (PAT)
• Many host to single public IP mapping
• Type
– NAT Overload
– Interface Overload
NAT Overload Configuration
myRouter>en
myRouter#conf t
myRouter(config)#access-list 40 permit 10.0.0.0 0.255.255.255
myRouter(config)#ip nat pool abcd 200.200.200.33
200.200.200.33 netmask 255.255.255.255
myRouter(config)#ip nat inside source list 40 pool abcd overload
myRouter(config)#end
NAT Binding
myRouter(config)#int fa0/0
myRouter(config-if)#ip nat inside
myRouter(config-if)#exit
myRouter(config)#int s0/0
myRouter(config-if)#ip nat outside
myRouter(config-if)#end
Interface Overload Configuration
myRouter>en
myRouter#conf t
myRouter(config)#access-list 40 permit 10.0.0.0 0.255.255.255
myRouter(config)#ip nat inside source list 40 int s0/0 overload
myRouter(config)#end
NAT Binding
myRouter(config)#int fa0/0
myRouter(config-if)#ip nat inside
myRouter(config-if)#exit
myRouter(config)#int s0/0
myRouter(config-if)#ip nat outside
myRouter(config-if)#end
Clear NAT Translations
• Works in Dynamic NAT and PAT
Router#clear ip nat translation *