Ch11 NAT - Practical Flashcards

1
Q

Configure Static NAT (6)

A
  1. ip nat inside source static local_ip global_ip //Establishes static translation between inside local address and inside global address.
  2. interface interface_id // Specifies interface to be used for inside.
  3. ip nat inside // Marks the interface as connected to the inside.
  4. exit // exits configuration mode
  5. interface interface_id // Specify interface to be used for outside.
  6. ip nat outside // Marks the interface as connected to the outside.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

3 Ways to Verify Static NAT Translations

A
  1. show ip nat translations // shows active NAT translations.
  2. show ip nat statistics
  3. clear ip nat statistics // used to clear NAT stats for testing.
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

Configure Dynamic NAT (7)

A
  1. ip nat pool pool_name start_ip end_ip {netmask subnet_mask | prefix-length prefix_length }
  2. access-list acl_number permit ip_source [source_wildcard] // creates acl permitting addresses that should be translated.
  3. ip nat inside source list acl_number pool pool_name // establish dynamic NAT and links acl and NAT pool.
  4. interface inside_interface_id
  5. ip nat inside
  6. interface outside_interface_id
  7. ip nat outside
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

4 Ways to Verify Dynamic NAT

A
  1. show ip nat translations {verbose}
  2. clear ip nat translations * // clears dynamic translations from NAT table.
  3. show ip nat statistics
  4. show running-config // look for NAT/ACL/interface/pool commands
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Configure PAT - Address Pool (7)

A
  1. ip nat pool pool_name start_ip end_ip {netmask subnet_mask | prefix-length prefix_length}
  2. access-list acl_number permit source_ip [source_wildcard]
  3. ip nat inside source list acl_number pool pool_name overload
  4. interface inside_interface_id
  5. ip nat inside
  6. interface outside_interface_id
  7. ip nat outside
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Configure PAT - Single Address (6)

A
  1. access-list acl_name permit source_ip [source_wildcard]
  2. ip nat inside source list acl_number inteface exit_interface_id overload // ip same as used in outside_interface_id in step 5
  3. interface inside_interface_id
  4. ip nat inside
  5. interface outside_interface_id
  6. ip nat outside
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Configure Port Forwarding (5)

A
  1. ip nat inside source {static {tcp | udp local_ip local _port global_ip global_port } [extendable]
  2. interface inside_interface_id
  3. ip nat inside
  4. interface outside_interface_id
  5. ip nat outside
How well did you know this?
1
Not at all
2
3
4
5
Perfectly