NAT

NETWORK ADDRESS TRANSLATION

PRIVATE IP TO PUBLIC IP TRANSLATION

PRIVATE IP

10.0.0.0/8

172.16---172.31.

192.168.0.---192.168.255.0

Private IP is not routable to internet.

PRIVATE IP –NAT—PUBLIC IP

1) STATIC NAT
ONE PRIVATE IP – ONE PUBLIC IP

NAT(config)#int s0/0
NAT(config-if)#ip nat inside
NAT(config-if)#int fa0/0
NAT(config-if)#ip nat outside
NAT(config-if)#exit
NAT(config)#ip nat inside source static 10.0.0.2 ?
A.B.C.D Inside global IP address
NAT(config)#ip nat inside source static 10.0.0.2 132.132.25.1
NAT(config)#ip nat inside source static 10.0.0.3 132.132.25.50
NAT(config)#ip nat inside source static 10.0.0.4 132.132.25.100

2) DYNAMIC NAT
RANGE OF PRIVATE IP – RANGE OF PUBLC IP
REMOVE STATIC NAT IF PRESENT

NAT(config)#no ip nat inside source static 10.0.0.4 132.132.25.100

NAT(config)#no ip nat inside source static 10.0.0.3 132.132.25.50
NAT(config)#no ip nat inside source static 10.0.0.2 132.132.25.1
NAT(config)#end
NAT#clear ip nat translation *
NAT#sh ip nat translations
NAT(config)#int s0/0
NAT(config-if)#ip nat inside
NAT(config-if)#int fa0/0
NAT(config-if)#ip nat outside
NAT(config-if)#exit
 NAT(config)#access-list 10 permit 10.0.0.0 0.255.255.255
NAT(config)#ip nat pool surat 132.132.25.150 132.132.25.160 netmask 255.255.0.0
NAT(config)#ip nat inside source list 10 pool surat
NAT(config)#

3) PAT (MANY TO ONE)

RANGE OF PRIVATE IP – ONE PUBLIC IP

NAT(config)#int s0/0
NAT(config-if)#ip nat inside
NAT(config-if)#int fa0/0
NAT(config-if)#ip nat outside
NAT(config-if)#exit

NAT(config)#access-list 10 permit 10.0.0.0 0.255.255.255

NAT(config)#ip nat pool surat 132.132.25.200 132.132.25.200 netmask 255.255.0.0
NAT(config)#ip nat inside source list 10 pool surat OVERLOAD
NAT(config)#