CCNA NAT SIM Question 1
Question
A network associate is configuring a router for the CCNA Training company to provide internet access. The ISP has provided the company six public IP addresses of 198.18.184.105 198.18.184.110. The company has 14 hosts that need to access the internet simultaneously. The hosts in the CCNA Training company LAN have been assigned private space addresses in the range of 192.168.100.17 – 192.168.100.30.
The task is to complete the NAT configuration using all IP addresses assigned by the ISP to provide Internet access for the hosts in the Weaver LAN. Functionality can be tested by clicking on the host provided for testing.
Configuration information
router name – Weaver
inside global addresses – 198.18.184.105 198.18.184.110/29
inside local addresses – 192.168.100.17 – 192.168.100.30/28
number of inside hosts – 14
The following have already been configured on the router: - The basic router configuration - The appropriate interfaces have been configured for NAT inside and NAT outside - The appropriate static routes have also been configured (since the company will be a stub network, no routing protocol will be required.) - All passwords have been temporarily set to “cisco” |
Solution
Note: If you are not sure how NAT & PAT work, please read my Network Address Translation NAT Tutorial. You can download this sim to practice here: http://www.9tut.com/download/9tut.com_CCNA_NAT_sim_question.zip
The CCNA Training company has 14 hosts that need to access the internet simultaneously but we just have 6 public IP addresses from 198.18.184.105 to 198.18.184.110/29. Therefore we have to use NAT overload (or PAT)
Double click on the Weaver router to open it
Router>enable
Router#configure terminal
First you should change the router’s name to Weaver
Router(config)#hostname Weaver
Create a NAT pool of global addresses to be allocated with their netmask (/29 = 255.255.255.248). There were reports that the simulator in the real exam did not accept “prefix-length” keryword so you should use “netmask” keyword.
Weaver(config)#ip nat pool mypool 198.18.184.105 198.18.184.110 netmask 255.255.255.248
Create a standard access control list that permits the addresses that are to be translated
Weaver(config)#access-list 1 permit 192.168.100.16 0.0.0.15
Establish dynamic source translation, specifying the access list that was defined in the prior step
Weaver(config)#ip nat inside source list 1 pool mypool overload
This command translates all source addresses that pass access list 1, which means a source address from 192.168.100.17 to 192.168.100.30, into an address from the pool named mypool (the pool contains addresses from 198.18.184.105 to 198.18.184.110)
Overload keyword allows to map multiple IP addresses to a single registered IP address (many-to-one) by using different ports
The question said that appropriate interfaces have been configured for NAT inside and NAT outside statements.
This is how to configure the NAT inside and NAT outside, just for your understanding:
Weaver(config)#interface fa0/0
Weaver(config-if)#ip nat inside
Weaver(config-if)#exit
Weaver(config)#interface s0/0
Weaver(config-if)#ip nat outside
Weaver(config-if)#end
Finally, we should save all your work with the following command:
Weaver#copy running-config startup-config
Check your configuration by going to “Host for testing” and type:
C:\>ping 192.0.2.114
The ping should work well and you will be replied from 192.0.2.114
Other lab-sims on this site:
CCNA Configuration SIM Question (RIPv2 SIM)
The configuiration has to be apply to the serial interface, In order to make it work.
Please send me latest dumps.
This question has been asked above. But the answer is not clear.
Which command would allow the translations to be created on the router?
(Exhibit shows the range 1.1.128.1-1.1.135.174)
A. ip nat pool mynats 1.1.128.1 1.1.135.254 prefix-length 19
B. ip nat outside mynats 1.1.128.1 1.1.135.254 prefix-length 19
C. ip nat pool mynats 1.1.128.1 1.1.135.254 prefix-length 18
D. ip nat outside mynats 1.1.128.1 1.1.135.254 prefix-length 18
I think the optimum prefix length should be 21.
Answer is given as 19
But if 19 is correct then definitely 18 should be correct!
Can someone correct me if I am wrong?
pls dis anyone write ccna exams today(february 1).are labs still vtp, acl and eigrp
@Vish, the answer is /19 because is the closest mask to /21
going to tkae ICND2 in 1 hour
yes labs – EIGRP, VTP and ACL I took 02-FEB-2012.
Can you tell me if we configure the default route in the eigrp simulation
tried this sim ..download and then apply the commands but ping is not working…even if i have not apply nat over it
Sim is not working i tried too many time but ping is not done..and also if i have not apply ping till it is not working
please tell me when will come my cisco certificate ??? i have done my CCNA last month. thanx
tanveer_simple@yahoo.com
By teh Grace of Allah I have passed my CCNA with 973. My labs are EIGRP, Access List and VTP.
@AMOL and @Anonymous
Did you assign the inside and outside nat commands to the FE0/0 and S0/0 ?
ip nat inside
ip nat outside
FA0/0 I meant.. d’oh
I would like to be able to see the configuration of the ISP router. 9tut, can you please provide me with the password for the router.
@wts
try “noway” :)
Does anyone have any binary files for gns3?
Can someone PLEASE explain to me where this comes from? I have nothing in my lab about a previous access list.
Weaver(config)#access-list 1 permit 192.168.100.16 0.0.0.15
Establish dynamic source translation, specifying the access list that was defined in the prior step
I am not understanding where this comes from or why its needed?
NM, I didn’t see the additional info in the box provided on the lower right. Now I get it
Passed yesterday.. for all you who are preparing for exam.. please do not be afraid at all. And do labs at this site, understand them because CISCO has a lot of questions to modify the labs, but if you understand these one then even if they change a couple of questions you will still make it. You can ask anything from me
@all
After my configuration, the ping from the testing host to the ISP timed out whereas i could ping the serial interface of the router from any of the host. What could be the problem?
Hi guys. I desperately need your help. I have to do the following and I have absolutely no idea how to do it.. Please help me out. my e-mail is antonisbigman@yahoo.gr
Outline:
ABC is currently re-locating to a new office in the city centre of London. The IT Manager has convinced the management of the company for enough budget for a new state-of-the-art IT implementation/solution.
The new premises consist of a building with 4 floors that all 80 employees of the company will be based there. Each floor has its own ITF room and the main computer room is located in the first floor. All servers and core devices will be placed there.
Your first task is to propose the design of the network infrastructure, take into consideration that the company is willing advanced technologies to be implemented. Your proposal should cover all the necessary architectures that should be followed for a modern, expandable, easy to manage network infrastructure, including cutting-edge technologies, helpful for any organization in our days. Then your design should include the addressing scheme of the company, taking into consideration the different types of traffic that you have proposed. Finally all technologies and devices should be implemented on a virtual tool.
Your work will be presented to the senior management of the company.
Tasks:
A. Design the logical diagram of the company’s network infrastructure (visio).
B. Propose all necessary Subnets and Protocols to use (table)
C. Implement the configuration of all the protocols and the technologies that you have identified (VLANs, Interfaces, etc) on a simulator (packet tracer).
D. Analyze the network infrastructure and the benefits of your proposal.
I am preparing to take the test in two weeks. Could someone send me the dumps to em10637@verizon.net
Mr 9tut,
I am very grateful to find your website. It is an awesome resource for the CCNA exam takers. Thank you so very much for helping us all out.
By the way, I took my 640-802 exam last week but couldn’t make it. Missed it by 20 points. But that was without going through any of the practice exams. Now that I have found your site I feel very confident to go back and give it another shot. Once again, the simulations and tutorials are very very helpful.
Thanks again,
Rommie,
Please post your contact info. I would like to get in touch with you regarding the CCNA exam. I am planning to re-take the exam this week or early next week.
Thanks,
My email is: loooto@yahoo.com
i am going to take my ccna exam on march 24th can anyone tel me the latest valid dumps weblink. thanks in advance.
i’m taking the exam tomorrow March 26th wish me luck :)
I am preparing to take the test in two weeks. Could someone send me the dumps to my e-mail: Romeo_bahrain@hotmail.com
Do you have to purchase the “Visual CertExam Manager” software to use these dumps?
@ Jay G
you can google it, its free.
I took the exam beginning of March and there was several questions on the exam that were not noted here.
Does anyone know of a site that has the most accurate copy of the current exam?
This site is not about giving you dumps that will be on the exams, it helps on preparing for the exam. It opens your mind on how to approach or tackle questions in the exam. If you read and know your staff you are good to go, then this site will prepare you even better even if if you do not get any questions on the exam from this site.
As for me it was very useful for my CCENT and iam going to make it again for the ICND2 on the Ist of May. I will use this site upto CCIE
to all ccna aspirants
http://www.scribd.com/hamadiegwu/d/58561614-Ti-640-802-v218-New-Question-and-Lab
very good site for ccna Q and Answers must see
@9tut and all please help meeee!!!!!
if a router connected to 3 switches on its different interfaces and to ISP on its serial interface
so how many interfaces should be configured as ip nat inside to acess the ISP router
answer is 4 but i cant understand how
plzzzzzzzzz any one help meeee
are they considering 3 interfaces as inside local & 1 as inside global??????
tank you
Once you mentioned you’re renaticg wordpress themes and selling them. I remembered and googled riso knop wordpress . It found some forums where you wrote link on netcovered.com and I’m here To keep with topic: the logo is great. The picture has hidden meaning or just filling space?
@9tut or @anyone with the answer
I always try to solve the Lab without looking at the answers and then I compare the commands that I use against the commands on the explanation.
I noticed that you used a numbered ACL, but I used a named ACL to create the access list:
ip access-list standard PRIVATE
permit 192.168.10.16 0.0.0.15
end
1. Am I doing something wrong or are both valid ?
2. Can I use whatever I want to name the pool of public ips and the ACL ? ( if its OK to use named ACL )
3. I finished the lab and I’m still unable to ping 192.0.2.114 using the Lab Sim I downloaded from this website. Can you double check if by using the above configuration you can ping 192.0.2.114 because I can’t.
@ 9tut
Please read Q3 from the comment above to understand this one :-)
The only way I was able to ping from any host to 192.0.2.114 was by mapping the PRIVATE range of IPs from the ACL to the interface serial 0/0, but NOT to the POOL we created of PUBLIC IPs that were given to us by the ISP. Why is this happening ?
The Task is to use ALL ip address assigned to us by the ISP.
But this is what I dont understand:
When it says ALL IP addresses, should we include in the pool the 192.0.2.113 address that is assigned to serial 0/0 of WEAVER router which is the Internet facing interface ? Because that ip must have been provided also by the ISP right ? If what I’m thinking is true then how would I configure a public address in a pool, that is not in a sequence. Remember that the ip nat pool command requires a start ip and an end ip, so how would you add the address 192.0.2.113 that is not in between the range of 198.18.184.105 – 198.18.184.110 ?
Or is it that the configuration we did on router WEAVER is OK but the ISP router of the LAB is missing some kind of static route or network statement saying to route all traffic destined to 198.18.184.105 – 198.18.184.110 range out to the 192.0.2.113 interface ?
I dont know what I’m doing wrong in the Lab Sim or if there is a problem with the Sim.
Please help!!!
@Danilin:
Regarding to your previous post:
1) Yes, both are valid
2) You can use whatever to name your acl (but please don’t use special characters to name it)
3) Did you establish dynamic translation (in your case the command should be:
ip nat inside source list PRIVATE pool mypool overload
and did you apply “ip nat inside” to Fa0/0 and “ip nat outside” to S0/0 interface?
If the problem still occurs, please upload your pkt file to http://www.certprepare.com/forum
Also, the 192.0.2.113 address (of S0/0) is not included in the pool.
@9tut
Sorry for all the confusion a also thanks for the fast response….. maybe I was tired today at 2:30am and I did something wrong, because I just tried the Sim again with the “same commands” I used, but now they “magically” worked . ha ha ha :-)
9tut,
your configuration for this sim will not work unless the ISP router knows how to reach the 198.18.184.104/29 network. do we have to configure the ISP router in the exam? or is the network address already configured in the ISP? can we open the CLI of the ISP?
@johnmaxwell: You can’t configure the ISP router in the exam. The ISP router has been configured to send traffic back to Weaver.
Hi,
@9tut
I am confused about “Bomar(config)#access-list 1 deny any” this command, just have a look on it and let me know please.
A network associate is configuring a router for the Bomar Company to provide Internet access. The ISP has provided the company with six Public IP addresses of 198.18.237.225 198.18.237.230. The company has 14 hosts that need to access the Internet simultaneously. The hosts in the company LAN have been assigned private space addresses in the range of 192.168.16.33 – 192.168.16.46.
The following have already been configured on the router:
- The basic router configuration
- The appropriate interfaces have been configured for NAT inside and NAT outside.
- The appropriate static routes have also been configured (since the company will be a stub network, no routing protocol will be required)
- All passwords have been temporarily set to “cisco”.
The task is to complete the NAT configuration using all IP addresses assigned by the ISP to provide Internet access for the hosts in the Bomar LAN. You have successfully completed this exercise when the host PC can ping the ISP.
Configuration Information:
Router Name – Bomar
Inside Global Addresses – 198.18.237.225 198.18.237.230/29
Inside Local Addresses – 192.168.16.33 – 192.168.16.46/28
Number of inside hosts – 14
Given answer is as mentioned as:
Bomar>ena
Bomar#configure terminal
Bomar(config)#access-list 1 permit 192.168.16.33 0.0.0.15
Bomar(config)#access-list 1 deny any
Bomar(config)#ip nat pool TestKiss 198.18.237.225 198.18.237.230 prefix-length 29
Bomar(config)#ip nat inside source list 1 pool TestKiss overload
Bomar(config)#interface fa0/0
Bomar(config-if)#ip nat inside
Bomar(config-if)#exit
Bomar(config)#interface s0/0
Bomar(config-if)#ip nat outside
Bomar(config-if)#end
Bomar# copy run start
As I corrected is:
Bomar>ena
Bomar#configure terminal
Bomar(config)#access-list 1 permit 192.168.16.33 0.0.0.15
Bomar(config)#access-list 1 deny any
Bomar(config)#ip nat pool TestKiss 198.18.237.225 198.18.237.230 netmask 255.255.255.248
Bomar(config)#ip nat inside source list 1 pool TestKiss overload
Bomar(config)#interface fa0/0
Bomar(config-if)#ip nat inside
Bomar(config-if)#exit
Bomar(config)#interface s0/0
Bomar(config-if)#ip nat outside
Bomar(config-if)#end
Bomar# copy run start
Today I passed with 986/1000 bcoz of God’s Grace & my effort also Thanx a lot to 9TUT.com & Examcollection.com. my sims were EIGRP, VTP, ACL2 frm 9tut. Total question 48. I solved those ques. very easily
1) i advice you that u 1st clear ur concept using study materials & notes (use Todd lammle book.It’s very helpful)
2) for dumps & Sims-> a) use 9tut. & other dumps are (Collisio.486q) (by.Jericho.632q)
(Bruce.564q) (by.DHARANI.615q) in those dumps there is l’ll bit difference. so pls go through…
get it from examcollection.com
dont mug up only, understand the concept. in real exam options comes randomly.
dont worry exam is very very easy if u follow these advise you will get above 900…………..100% true
3) One question made me confuse:–>
In which circumstance are multiple copies of the same unicast frame likely to be transmitted in the Switched LAN?
A. During high traffic periods
B. In an improperly implemented redundant topology
C. After broken links are re-established
D. When upper-layer protocols require high reliability
E. When a dual ring topology is in use
I choose>B. In an improperly implemented redundant topology
that’s why i lose 14 marks otherwise all ques 100% correct
I think the correct ans is:–E. When a dual ring topology is in use
Pls check out this ques
Best of luck guys………………..
i got 986………..thank you so much for help 9tut……
planning to do the exam on 20th this month if any one has a valid dumbs amd sim plz email me on alkenani_27@yahoo,com i really dont know how to get these dumbs and how to make sure they are valid plz hellllllllppppppp
@osama alkenani: Brother every thing is here on this site try to spare sometime and study here!
Ali
@john
after searching for the question that you think you lose 14 points well actually, Your answer is write .
B. In an improperly implemented redundant topology.
look at this link fist question
http://www.9tut.com/ccna-switch-questions-2