SEDINTA 3

NAT overloading (sometimes called Port Address Translation or PAT) maps multiple private IP addresses to a single public IP address or a few addresses

OBS: Lista de acces 1 poate avea mai multe comenzi permit

Verify NAT translations:

Router#show ip nat translations
Subnetare IP-uri Publice exemplu 1:
210.2.2.35-210.2.2.63 /27 (255.255.255.224)

Subnet Adresa IP Sn Host

SN1 210.2.2.32 001 00000 Adresa SN1
210.2.2.33 001 00001 Adresa Host SN1 ISP
210.2.2.34 001 00010 Adresa Host SN1
210.2.2.35 001 00011 Adresa Host SN1
..... NAT
210.2.2.62 001 11110 Adresa Host SN1
210.2.2.63 001 11111 Adresa Broadcast SN1

Subnetare IP-uri Publice exemplul 2:

210.2.2.10-210.2.2.22 /29 (255.255.255.248)

Subnet Adresa IP Sn Host

SN1 210.2.2.8 00001 000 Adresa SN1
210.2.2.9 00001 001 Adresa Host SN1 ISP
210.2.2.10 00001 010 Adresa Host SN1
210.2.2.11 00001 011 Adresa Host SN1
..... NAT
210.2.2.14 00001 110 Adresa Host SN1
210.2.2.15 00001 111 Adresa Broadcast SN1
 How to configure NAT on multilayer switch (switch layer3) in Packet Tracer version 7.2.1:
In Packet Tracer version 7.2.1 you will not be able to configure NAT on the physical interfaces! Thus, you have to create logical interfaces (in our case VLAN
interfaces), and on the logical interfaces you will be able to specify the ip nat inside or ip nat outside commands.

On the layer3switch, connecting the DMZ:

For NAT: do not use the physical interfaces (example: fa0/2). Create a logical interface using the following steps:
1. Delete any existing IP addresses on physical interfaces (example: fa0/2) and set the interface in the switchport mode
#interface fa0/2
#no ip address
#switchport
2.Create VLAN 99
#vlan 99
3.Add an IP address to interface VLAN 99
#interface vlan 99
#ip address 210.2.2.1 255.255.255.0
4.Set the physical interface to VLAN 99
#interface fa0/2
#switchport
#switchport access vlan 99
5.Configure IP NAT INSIDE command on interface VLAN 99
#interface vlan 99
#ip nat outside

On the ISP layer3switch, use the following steps:

(do not use the physical interface)
1.Create VLAN 99
#vlan 99
2.Add IP address to interface VLAN 99
#interface vlan 99
#ip address 210.2.2.2 255.255.255.0

3.Set the physical interface to VLAN 99

#interface fa0/1
#switchport
#switchport access vlan 99

See the figure below, for an exemple: