c

Static NAT
KHAWAR BUTT
CCIE # 12353 [R/S, SECURITY, SP, DC, VOICE, STORAGE & CCDE]
Overview
 Static NAT Overview
 Configuration Commands
 Lab Configuration c
Network Diagram
Internet
E 0/0 E 0/0
R2 R3
192.1.30.0/24

S 1/0

c
192.1.20.0/24

S 1/0

R1

E 0/0
192.168.10.0/24

E 0/0 E 0/0
PC3
R4 R5
PC1 PC2
E 0/1 E 0/1

192.168.20.0/24
Static NAT
 This type of NAT is used when internal devices require a fixed address on the
internet.
 Generally this is in the case of the company’s public devices/servers that need to be
c
accessed from the Internet by clients.
 You configure the mapping between the internal IP to its corresponding public IP
manually on the router.
 Unlike Dynamic NAT, where the entry in the translation table is created when the
client initiates the connection, Static NAT entries are created immediately.
 The reason for this is that the entry needs to be present in the translation table at
the time the Internet-based client initiates a connection towards your Public Server.
Configuration Commands
 Step 1: Map the Web Server 192.168.10.4 to 192.1.20.21 statically. Also map
192.168.10.5 as 192.1.20.22.

ip nat inside source static 192.168.10.4 192.1.20.21

c
ip nat inside source static 192.168.10.5 192.1.20.22

 Step 2: Specifying the Internal and External Interfaces

Interface S 1/0
ip nat outside
Interafce E 0/0
ip nat inside
Lab Configuration
 Configure R1 to statically translate R4 (192.168.10.4) as
192.1.20.21 on the outside. Also, statically translate R5
(192.168.10.5) as 192.1.20.22.
c

 As we have already configured S 1/0 as Outside and E 0/0

as Inside, we don’t need to configure it again.
 Test the configuration by ping or Telneting into R4 and R5
from R3 using their Public Addresses.
Configuration Commands
R1

Ip nat inside source static 192.168.10.4 192.1.20.21

Ip nat inside source static 192.168.10.5 192.1.20.22
c
 Telnet to R4 from R3 using 192.1.20.21 as the address.

 Telnet to R5 from R3 using 192.1.20.22 as the address.

Whiteboard