DYNAMIC NAT

Requirements
Configure dynamic Network Address Translation (NAT) on R1 for devices S1, S2, and S3, as follows:
•Enable dynamic NAT for all hosts in the subnet connected to R1’s G0/1 interface, a subnet inside the
enterprise network
•Create a pool of addresses to use when translating before forwarding packets towards R2, considered the
outside part of the network.
•Use a name of nat_pool
•The pool should use a subset of the addresses in the subnet that sits between R1 and R2, specifically
addresses 172.16.10.10 through 172.16.10.20 (inclusive)
•Configure static routes as needed on R2 so that R2 can forward packets back to these inside global
addresses
•Assume all router interfaces shown in the lab are up, working, and configured with IP addresses
Initial Configuration
Examples 1 and 2 show the beginning configuration state of R1 and R2.

1 hostname R1
2 interface GigabitEthernet0/1
3 ip address 10.1.1.1 255.255.255.0
4 no shutdown
5 interface GigabitEthernet0/2
ip address 172.16.10.1 255.255.255.0
6 no shutdown
7
8
9

1 hostname R2
2 !
3 interface GigabitEthernet0/1
4 ip address 172.16.10.2 255.255.255.0
5 no shutdown
 interface GigabitEthernet0/1
2 ip nat inside
3 !
4 interface GigabitEthernet0/2
5 ip nat outside
6 !
7 ip nat pool nat_pool 172.16.10.10 172.16.10.20 netmask
8 255.255.255.0
9 ip nat inside source list 1 pool nat_pool
1 !
0 access-list 1 permit 10.1.1.0 0.0.0.255
STATIC NAT

Configure static Network Address Translation (NAT) on R1 for devices S1, S2, and S3. The specific rules for this
lab are:
 hostname R1
2 interface GigabitEthernet0/1
3 ip address 192.168.1.1 255.255.255.0
4 no shutdown
5 !
6 interface GigabitEthernet0/2
7 ip address 10.10.10.1 255.255.255.252
8 no shutdown
9
1
0
1 hostname R2
1 !
1 interface GigabitEthernet0/1
2 ip address 10.10.10.2 255.255.255.252
1 no shutdown
3
interface GigabitEthernet0/1
ip nat inside
!
interface GigabitEthernet0/2
ip nat outside
!
ip nat inside source static 192.168.1.10 172.16.1.10
ip nat inside source static 192.168.1.20 172.16.1.20
ip nat inside source static 192.168.1.30 172.16.1.30