CONFIGURE NAT

Types of NAT:
1. Static NAT
2. Dynamic NAT
3. Port Address Translation (PAT) – aka NAT Overload: 2 methods – pool and interface.

STATIC NAT
Steps Commands Explanation Details
 Enter in g0/1 interface config Useful commands:
Router(config)#int g0/1
Define the inside interface(s) mode Show ip nat statistics
connected to the internal  Define g0/1 interface as the Show ip nat translations
network Router(config-if)#ip nat inside inside interface connected to the Clear ip nat translations *
local network Show run | include nat
 Enter in g0/0 interface config
Router(config)#int g0/0
Define the outside mode
interface(s) connected to the  Define g0/0 interface as the
external network Router(config-if)#ip nat outside outside interface connected to the
external network
 Map public IP address of
Router(config)#ip nat inside source static
100.0.0.1 to 192.168.0.167 private
192.168.0.167 100.0.0.1
Configure the one-to-one IP IP address
address mappings  Map public IP address of
Router(config)#ip nat inside source static
100.0.0.2 to 192.168.0.168 private
192.168.0.168 100.0.0.2
IP address
Verify the NAT table Router#show ip nat translations  Shows NAT table

1 of 3

Steps
Define the inside interface(s)
connected to the internal
network
Define the outside
interface(s) connected to the
external network
Define the traffic that should
be translated
Define the pool of inside
global IP addresses
Configure dynamic NAT by
mapping the ACL to the pool
Verify the NAT table
DYNAMIC NAT
Commands Explanation Details
 Enter in g0/1 interface config Useful commands:
Router(config)#int g0/1
mode Show ip nat statistics
 Define g0/1 interface as the Show ip nat translations
Router(config-if)#ip nat inside inside interface connected to the Clear ip nat translations *
local network Show run | include nat
 Enter in g0/0 interface config
Router(config)#int g0/0
mode
 Define g0/0 interface as the
Router(config-if)#ip nat outside outside interface connected to the
external network
 Create access list 1 – permit
Router(config)#access-list 1 permit 192.168.0.0 traffic permitted by the ACL
traffic from 192.168.0.0/24
0.0.0.255 1 will be translated
network
You can use prefix-length
Router(config)#ip nat pool POOL1 100.0.0.0  Define the pool of inside global
24 or netmask
100.0.0.255 prefix-length 24 IP addresses used for translations
255.255.255.0
 Apply ACL 1 to the POOL1 –
Router(config)#ip nat inside source list 1 pool
traffic permitted by the ACL 1
POOL1
should be translated, the other not
Router#show ip nat translations  Shows NAT table

PAT – pool method

Steps
Define the inside interface(s)
connected to the internal
network
Commands Explanation
 Enter in g0/1 interface config
Router(config)#int g0/1
mode
 Define g0/1 interface as the
Router(config-if)#ip nat inside inside interface connected to the
local network
Details
Useful commands:
Show ip nat statistics
Show ip nat translations
Clear ip nat translations *
Show run | include nat

2 of 3
 Steps Commands Explanation Details
 Enter in g0/0 interface config
Router(config)#int g0/0
Define the outside mode
interface(s) connected to the  Define g0/0 interface as the
external network Router(config-if)#ip nat outside outside interface connected to the
external network
 Create access list 1 – permit
Define the traffic that should Router(config)#access-list 1 permit 192.168.0.0 traffic permitted by the ACL
traffic from 192.168.0.0/24
be translated 0.0.0.255 1 will be translated
network
Define the pool of inside Router(config)#ip nat pool POOL1 100.0.0.0  Define the pool of inside global
global IP addresses 100.0.0.3 prefix-length 24 IP addresses used for translations
 Apply ACL 1 to the POOL1 –
Configure PAT by mapping Router(config)#ip nat inside source list 1 pool
traffic permitted by the ACL 1 Use overload keyword
the ACL to the pool POOL1 overload
should be translated, the other not
Verify the NAT table Router#show ip nat translations  Shows NAT table

PAT – interface method (most used)

Steps
Define the inside interface(s)
connected to the internal
network
Define the outside
interface(s) connected to the
external network
Define the traffic that should
be translated
Configure PAT by mapping
the ACL to the outside
interface
Commands Explanation Details
 Enter in g0/1 interface config
Router(config)#int g0/1 Configure the router to use
mode
its own public IP address
 Define g0/1 interface as the when translating the source
Router(config-if)#ip nat inside inside interface connected to the IP of packets
local network
 Enter in g0/0 interface config Useful commands:
Router(config)#int g0/0
mode Show ip nat statistics
 Define g0/0 interface as the Show ip nat translations
Router(config-if)#ip nat outside outside interface connected to the Clear ip nat translations *
external network Show run | include nat
 Create access list 1 – permit
Router(config)#access-list 1 permit 192.168.0.0 traffic permitted by the ACL
traffic from 192.168.0.0/24
0.0.0.255 1 will be translated
network
 Apply ACL 1 to the interface
g0/0 connected to the external
Router(config)#ip nat inside source list 1 interface
networl – traffic permitted by the Use overload keyword
g0/0 overload
ACL 1 should be translated, the
other not

3 of 3
 Steps Commands Explanation Details
Verify the NAT table Router#show ip nat translations  Shows NAT table

4 of 3