USTHB - FGE High Speed Networks

M1 RT 2022/2023 M. Hamidia & Y. Harkat

Lab N°2 – WAN Access Simulation: Configuring Network

Address Translation (NAT) and Port Address Translation
(PAT)

Overview
In this Lab, you will practice configuring dynamic NAT pool overload. You will use PAT to convert
multiple internal addresses to a usable public address. You will test, view and verify that the
translations are occurring, and interpret NAT/PAT statistics to monitor the process.

Objectives
Part 1: Build the Network and Verify Connectivity
Part 2: Configure and Verify NAT Pool Overload
Part 3: Configure and Verify PAT

Topology and Addressing Table

Consider the following WAN network topology and Addressing Table.

Figure: Lab Topology

1 of 4
USTHB - FGE High Speed Networks
M1 RT 2022/2023 M. Hamidia & Y. Harkat

Addressing Table

Device Interface IP Address Subnet Mask Default Gateway

Gateway Gig0/1 192.168.1.1 255.255.255.0 N/A

Se0/0/1 209.165.201.18 255.255.255.252 N/A

ISP Se0/0/0 (DCE) 209.165.201.17 255.255.255.252 N/A

Gig0/0 209.165.200.1 255.255.255.252 N/A

PC-A NIC 192.168.1.20 255.255.255.0 Must be set up by

the student
PC-B NIC 192.168.1.21 255.255.255.0 Must be set up by
the student
PC-C NIC 192.168.1.22 255.255.255.0 Must be set up by
the student
Server NIC 209.165.200.2 255.255.255.252 Must be set up by
the student

Part 1: Build the Network and Verify Connectivity

In Part 1, you will set up the network topology and configure basic settings, such as the interface IP
addresses.

Step 1: Cable the network as shown in the topology.

Step 2: The notations given on the topology must be respected.

Step 3: Configure PC hosts and Server according to the addressing table.

Step 4: Configure basic settings for each router.

a. Configure the IP addresses of the routers according to the addressing table.
b. Configure the host name as shown in the topology.
c. Copy the running configuration to the startup configuration.

Part 2: Build the Network and Verify Connectivity

In Part 2, a company is allocated the public IP address range 209.165.200.224/29 by the ISP. This
provides the company with 6 public IP addresses.

Step 1: Configure static routing.

a. On the ISP router, create a static route from the allocated public IP address range to the Gateway
router.
b. Create a default route from the Gateway router to the ISP router.

2 of 4
USTHB - FGE High Speed Networks
M1 RT 2022/2023 M. Hamidia & Y. Harkat

Step 2: Verify network connectivity.

a. From the PC hosts, ping the G0/1 interface on the Gateway router. Troubleshoot if the pings are
unsuccessful.
b. Verify that the static routes are configured correctly on both routers.

c. From the PC hosts, ping the Server. Did the ping succeed ? Why ?

Part 3: Configure and Verify NAT Pool Overload

In Part 3, you will configure the Gateway router to translate the IP addresses from the 192.168.1.0/24
network to one of the 6 usable addresses in the 209.165.200.224/29 range (pool).

Step 1: Define an access control list (ACL 1) that matches the LAN private IP addresses.
ACL 1 is used to allow the 192.168.1.0/24 network to be translated.

Step 2: Define the pool of usable public IP addresses. Give the name “public_access’’ to
this pool.

Step 3: Define the NAT from the inside source list to the outside pool.

Step 4: Specify the inside and outside interfaces.

Issue the ip nat inside and ip nat outside commands to the interfaces.

Step 5: Verify the NAT pool overload configuration.

a. From each PC host, ping the Server.
b. Display NAT translations on the Gateway router.
Note: Depending on how much time has elapsed since you performed the pings from each PC,
you may not see all three translations. ICMP translations have a short timeout value. Repeat the
ping if the translations are not displayed.
▪ How many Inside local IP addresses are listed in the sample output above?
▪ How many Inside global IP addresses are listed?
▪ How many port numbers are paired with the Inside global addresses?
▪ What would be the result of pinging the Inside local address of PC-A from the ISP router?
Why?

Part 4: Configure and Verify PAT

In Part 3, you will configure PAT by using an interface instead of a pool of addresses to define the
outside address. Not all of the commands in Part 3 will be reused in Part 4. We need to remove some
commands.

Step 1: Configurations that should not be modifiedthe PAT configuration.

a. Outside and inside interfaces are configured for NATs.
b. The ACL must still be configured for NATs

Step 2: Remove the pool of usable public IP addresses.

Step 3: Remove the NAT translation from inside source list to outside pool.
3 of 4
USTHB - FGE High Speed Networks
M1 RT 2022/2023 M. Hamidia & Y. Harkat

Step 4: Associate the source list with the outside interface.

Step 5: Test the PAT configuration.

a. From each PC, ping the Server.
b. Display NAT translations on Gateway.
c. Based on the Lab's experiment, what advantages does PAT provide?

4 of 4