NetworkPlus Training Center

HCIA Lab
Version 1.0

By: Ismail Ibrahim

Network Address Translation
Lab# 6
Network Address Translation
Objective
As a result of this lab section, you should achieve the
following tasks:
• Translation of addresses between networks (NAT).
• Configuration of Easy IP.
• Configuration static Nat.
• Configuration dynamic Nat.
Tasks
Topology:

Step 1 Configure static Nat that translate 10.0.0.2 to 15.0.0.3, 10.0.0.3 to

15.0.0.4, 10.0.0.4 to 15.0.0.5.

AR1 configuration.

[AR1]interface g0/0/0

[AR1-GigabitEthernet0/0/0]ip address 15.0.0.1 8

[AR1-GigabitEthernet0/0/0]nat static enable

[AR1-GigabitEthernet0/0/0]quit

[AR1]interface g0/0/1

[AR1-GigabitEthernet0/0/1]ip address 10.0.0.1 8

[AR1-GigabitEthernet0/0/1]quit

[AR1]ip route-static 20.0.0.0 8 15.0.0.2

[AR1]nat static global 15.0.0.3 inside 10.0.0.2

[AR1]nat static global 15.0.0.4 inside 10.0.0.3

[AR1]nat static global 15.0.0.5 inside 10.0.0.4

AR2 configuration.

[AR2]interface g0/0/0

[AR2-GigabitEthernet0/0/0]ip address 15.0.0.2 8

[AR2-GigabitEthernet0/0/0]quit

[AR2]interface g0/0/1

[AR2-GigabitEthernet0/0/1]ip address 20.0.0.1 8

Ping should work from 10.0.0.0/8 to 20.0.0.0/8 and vice versa.

Step 2 Configure dynamic Nat with address group that contain only two public
IP.

[AR1]undo nat static global 15.0.0.3 inside 10.0.0.2

[AR1]undo nat static global 15.0.0.4 inside 10.0.0.3

[AR1]undo nat static global 15.0.0.5 inside 10.0.0.4

[AR1]acl 2000

[AR1-acl-basic-2000]rule 1 permit source 10.0.0.0 0.255.255.255

[AR1]nat address-group 0 15.0.0.3 15.0.0.4

[AR1]interface g0/0/0

[AR1-GigabitEthernet0/0/0]nat outbound 2000 address-group 0

Ping should work from 10.0.0.0/8 to 20.0.0.0/8.

Step 3 configure Easy IP that translate 10.0.0.0/8 network to 15.0.0.1.

[AR1]interface g0/0/0

[AR1-GigabitEthernet0/0/0]undo nat outbound 2000 address-group 0

[AR1-GigabitEthernet0/0/0]nat outbound 2000

Step 4 Configure static Nat that forward any http and icmp traffic sourced to
15.0.0.1.

[AR1]nat server protocol tcp global 15.0.0.1 80 inside 10.0.0.2 80

[AR1]nat static protocol icmp global 15.0.0.1 inside 10.0.0.2