Home > CCNA NAT SIM Question 1

CCNA NAT SIM Question 1

January 5th, 2014 Go to comments

Question

A network associate is configuring a router for the CCNA Training company to provide internet access. The ISP has provided the company six public IP addresses of 198.18.184.105 198.18.184.110. The company has 14 hosts that need to access the internet simultaneously. The hosts in the CCNA Training company LAN have been assigned private space addresses in the range of 192.168.100.17 – 192.168.100.30.

The task is to complete the NAT configuration using all IP addresses assigned by the ISP to provide Internet access for the hosts in the Weaver LAN. Functionality can be tested by clicking on the host provided for testing.

Configuration information
router name – Weaver
inside global addresses – 198.18.184.105 198.18.184.110/29
inside local addresses – 192.168.100.17 – 192.168.100.30/28
number of inside hosts – 14

The following have already been configured on the router:

- The basic router configuration

- The appropriate interfaces have been configured for NAT inside and NAT outside

- The appropriate static routes have also been configured (since the company will be a stub network, no routing protocol will be required.)

- All passwords have been temporarily set to “cisco”

ccna_nat_sim_lab1

ccna_nat_sim_lab2

Solution

Note: If you are not sure how NAT & PAT work, please read my Network Address Translation NAT Tutorial. You can download this sim to practice here: http://www.9tut.com/download/9tut.com_CCNA_NAT_sim_question.zip

The CCNA Training company has 14 hosts that need to access the internet simultaneously but we just have 6 public IP addresses from 198.18.184.105 to 198.18.184.110/29. Therefore we have to use NAT overload (or PAT)

Double click on the Weaver router to open it

Router>enable
Router#configure terminal

First you should change the router’s name to Weaver

Router(config)#hostname Weaver

Create a NAT pool of global addresses to be allocated with their netmask (/29 = 255.255.255.248). There were reports that the simulator in the real exam did not accept “prefix-length” keryword so you should use “netmask” keyword.

Weaver(config)#ip nat pool mypool 198.18.184.105 198.18.184.110 netmask 255.255.255.248

Create a standard access control list that permits the addresses that are to be translated

Weaver(config)#access-list 1 permit 192.168.100.16 0.0.0.15

Establish dynamic source translation, specifying the access list that was defined in the prior step

Weaver(config)#ip nat inside source list 1 pool mypool overload

This command translates all source addresses that pass access list 1, which means a source address from 192.168.100.17 to 192.168.100.30, into an address from the pool named mypool (the pool contains addresses from 198.18.184.105 to 198.18.184.110)

Overload keyword allows to map multiple IP addresses to a single registered IP address (many-to-one) by using different ports

The question said that appropriate interfaces have been configured for NAT inside and NAT outside statements.

This is how to configure the NAT inside and NAT outside, just for your understanding:

Weaver(config)#interface fa0/0
Weaver(config-if)#ip nat inside

Weaver(config-if)#exit

Weaver(config)#interface s0/0
Weaver(config-if)#ip nat outside
Weaver(config-if)#end

Finally, we should save all your work with the following command:

Weaver#copy running-config startup-config

Check your configuration by going to “Host for testing” and type:

C:\>ping 192.0.2.114

The ping should work well and you will be replied from 192.0.2.114

Other lab-sims on this site:

CCNA NAT SIM Question 1

CCNA NAT SIM Question 2

CCNA Frame Relay Sim

CCNA Configuration SIM Question (RIPv2 SIM)

CCNA VTP SIM

CCNA EIGRP LAB

CCNA Drag and Drop SIM

CCNA Implementation SIM

 

Comments
Comment pages
1 2 3 4 5 6 12 23
  1. Anonymous
    January 7th, 2012

    The configuiration has to be apply to the serial interface, In order to make it work.

  2. jagan
    January 16th, 2012

    Please send me latest dumps.

  3. Vish
    January 27th, 2012

    This question has been asked above. But the answer is not clear.

    Which command would allow the translations to be created on the router?

    (Exhibit shows the range 1.1.128.1-1.1.135.174)

    A. ip nat pool mynats 1.1.128.1 1.1.135.254 prefix-length 19
    B. ip nat outside mynats 1.1.128.1 1.1.135.254 prefix-length 19
    C. ip nat pool mynats 1.1.128.1 1.1.135.254 prefix-length 18
    D. ip nat outside mynats 1.1.128.1 1.1.135.254 prefix-length 18

    I think the optimum prefix length should be 21.
    Answer is given as 19
    But if 19 is correct then definitely 18 should be correct!

    Can someone correct me if I am wrong?

  4. lana
    February 1st, 2012

    pls dis anyone write ccna exams today(february 1).are labs still vtp, acl and eigrp

  5. Aerodesliza
    February 3rd, 2012

    @Vish, the answer is /19 because is the closest mask to /21

  6. NextGonnabeACCIEexam
    February 3rd, 2012

    going to tkae ICND2 in 1 hour

  7. sek
    February 4th, 2012

    yes labs – EIGRP, VTP and ACL I took 02-FEB-2012.

  8. luc
    February 10th, 2012

    Can you tell me if we configure the default route in the eigrp simulation

  9. Anonymous
    February 16th, 2012

    tried this sim ..download and then apply the commands but ping is not working…even if i have not apply nat over it

  10. AMOL
    February 16th, 2012

    Sim is not working i tried too many time but ping is not done..and also if i have not apply ping till it is not working

  11. Tanveer
    February 24th, 2012

    please tell me when will come my cisco certificate ??? i have done my CCNA last month. thanx
    tanveer_simple@yahoo.com

  12. Usman
    February 29th, 2012

    By teh Grace of Allah I have passed my CCNA with 973. My labs are EIGRP, Access List and VTP.

  13. Anonymous
    March 1st, 2012

    @AMOL and @Anonymous

    Did you assign the inside and outside nat commands to the FE0/0 and S0/0 ?

    ip nat inside
    ip nat outside

  14. Rick
    March 1st, 2012

    FA0/0 I meant.. d’oh

  15. wts
    March 3rd, 2012

    I would like to be able to see the configuration of the ISP router. 9tut, can you please provide me with the password for the router.

  16. xallax
    March 3rd, 2012

    @wts
    try “noway” :)

  17. cj6a
    March 3rd, 2012

    Does anyone have any binary files for gns3?

  18. SlaggBot
    March 4th, 2012

    Can someone PLEASE explain to me where this comes from? I have nothing in my lab about a previous access list.

    Weaver(config)#access-list 1 permit 192.168.100.16 0.0.0.15

    Establish dynamic source translation, specifying the access list that was defined in the prior step

    I am not understanding where this comes from or why its needed?

  19. SlaggBot
    March 4th, 2012

    NM, I didn’t see the additional info in the box provided on the lower right. Now I get it

  20. Rommie
    March 11th, 2012

    Passed yesterday.. for all you who are preparing for exam.. please do not be afraid at all. And do labs at this site, understand them because CISCO has a lot of questions to modify the labs, but if you understand these one then even if they change a couple of questions you will still make it. You can ask anything from me

  21. Odoms
    March 17th, 2012

    @all

    After my configuration, the ping from the testing host to the ISP timed out whereas i could ping the serial interface of the router from any of the host. What could be the problem?

  22. Antonis
    March 18th, 2012

    Hi guys. I desperately need your help. I have to do the following and I have absolutely no idea how to do it.. Please help me out. my e-mail is antonisbigman@yahoo.gr
    Outline:
    ABC is currently re-locating to a new office in the city centre of London. The IT Manager has convinced the management of the company for enough budget for a new state-of-the-art IT implementation/solution.
    The new premises consist of a building with 4 floors that all 80 employees of the company will be based there. Each floor has its own ITF room and the main computer room is located in the first floor. All servers and core devices will be placed there.
    Your first task is to propose the design of the network infrastructure, take into consideration that the company is willing advanced technologies to be implemented. Your proposal should cover all the necessary architectures that should be followed for a modern, expandable, easy to manage network infrastructure, including cutting-edge technologies, helpful for any organization in our days. Then your design should include the addressing scheme of the company, taking into consideration the different types of traffic that you have proposed. Finally all technologies and devices should be implemented on a virtual tool.
    Your work will be presented to the senior management of the company.
    Tasks:
    A. Design the logical diagram of the company’s network infrastructure (visio).
    B. Propose all necessary Subnets and Protocols to use (table)
    C. Implement the configuration of all the protocols and the technologies that you have identified (VLANs, Interfaces, etc) on a simulator (packet tracer).
    D. Analyze the network infrastructure and the benefits of your proposal.

  23. Shalini
    March 19th, 2012

    I am preparing to take the test in two weeks. Could someone send me the dumps to em10637@verizon.net

  24. Raz
    March 21st, 2012

    Mr 9tut,
    I am very grateful to find your website. It is an awesome resource for the CCNA exam takers. Thank you so very much for helping us all out.
    By the way, I took my 640-802 exam last week but couldn’t make it. Missed it by 20 points. But that was without going through any of the practice exams. Now that I have found your site I feel very confident to go back and give it another shot. Once again, the simulations and tutorials are very very helpful.
    Thanks again,

  25. Raz
    March 21st, 2012

    Rommie,
    Please post your contact info. I would like to get in touch with you regarding the CCNA exam. I am planning to re-take the exam this week or early next week.
    Thanks,
    My email is: loooto@yahoo.com

  26. raji
    March 21st, 2012

    i am going to take my ccna exam on march 24th can anyone tel me the latest valid dumps weblink. thanks in advance.

  27. Naekua
    March 25th, 2012

    i’m taking the exam tomorrow March 26th wish me luck :)

  28. adel
    March 29th, 2012

    I am preparing to take the test in two weeks. Could someone send me the dumps to my e-mail: Romeo_bahrain@hotmail.com

  29. Jay G
    March 29th, 2012

    Do you have to purchase the “Visual CertExam Manager” software to use these dumps?

  30. Zia
    April 4th, 2012

    @ Jay G

    you can google it, its free.

  31. Neena
    April 9th, 2012

    I took the exam beginning of March and there was several questions on the exam that were not noted here.

  32. Neena
    April 9th, 2012

    Does anyone know of a site that has the most accurate copy of the current exam?

  33. Lazanya
    April 18th, 2012

    This site is not about giving you dumps that will be on the exams, it helps on preparing for the exam. It opens your mind on how to approach or tackle questions in the exam. If you read and know your staff you are good to go, then this site will prepare you even better even if if you do not get any questions on the exam from this site.
    As for me it was very useful for my CCENT and iam going to make it again for the ICND2 on the Ist of May. I will use this site upto CCIE

  34. faraz mustafa
    April 18th, 2012

    to all ccna aspirants

    http://www.scribd.com/hamadiegwu/d/58561614-Ti-640-802-v218-New-Question-and-Lab

    very good site for ccna Q and Answers must see

  35. faraz mustafa
    April 19th, 2012

    @9tut and all please help meeee!!!!!

    if a router connected to 3 switches on its different interfaces and to ISP on its serial interface
    so how many interfaces should be configured as ip nat inside to acess the ISP router
    answer is 4 but i cant understand how
    plzzzzzzzzz any one help meeee

  36. faraz mustafa
    April 19th, 2012

    are they considering 3 interfaces as inside local & 1 as inside global??????

  37. vahid
    April 20th, 2012

    tank you

  38. Santhosh
    April 22nd, 2012

    Once you mentioned you’re renaticg wordpress themes and selling them. I remembered and googled riso knop wordpress . It found some forums where you wrote link on netcovered.com and I’m here To keep with topic: the logo is great. The picture has hidden meaning or just filling space?

  39. Danilin
    April 25th, 2012

    @9tut or @anyone with the answer

    I always try to solve the Lab without looking at the answers and then I compare the commands that I use against the commands on the explanation.

    I noticed that you used a numbered ACL, but I used a named ACL to create the access list:

    ip access-list standard PRIVATE
    permit 192.168.10.16 0.0.0.15
    end

    1. Am I doing something wrong or are both valid ?
    2. Can I use whatever I want to name the pool of public ips and the ACL ? ( if its OK to use named ACL )
    3. I finished the lab and I’m still unable to ping 192.0.2.114 using the Lab Sim I downloaded from this website. Can you double check if by using the above configuration you can ping 192.0.2.114 because I can’t.

  40. Danilin
    April 25th, 2012

    @ 9tut
    Please read Q3 from the comment above to understand this one :-)

    The only way I was able to ping from any host to 192.0.2.114 was by mapping the PRIVATE range of IPs from the ACL to the interface serial 0/0, but NOT to the POOL we created of PUBLIC IPs that were given to us by the ISP. Why is this happening ?

    The Task is to use ALL ip address assigned to us by the ISP.
    But this is what I dont understand:

    When it says ALL IP addresses, should we include in the pool the 192.0.2.113 address that is assigned to serial 0/0 of WEAVER router which is the Internet facing interface ? Because that ip must have been provided also by the ISP right ? If what I’m thinking is true then how would I configure a public address in a pool, that is not in a sequence. Remember that the ip nat pool command requires a start ip and an end ip, so how would you add the address 192.0.2.113 that is not in between the range of 198.18.184.105 – 198.18.184.110 ?

    Or is it that the configuration we did on router WEAVER is OK but the ISP router of the LAB is missing some kind of static route or network statement saying to route all traffic destined to 198.18.184.105 – 198.18.184.110 range out to the 192.0.2.113 interface ?

    I dont know what I’m doing wrong in the Lab Sim or if there is a problem with the Sim.

    Please help!!!

  41. 9tut
    April 25th, 2012

    @Danilin:
    Regarding to your previous post:
    1) Yes, both are valid
    2) You can use whatever to name your acl (but please don’t use special characters to name it)
    3) Did you establish dynamic translation (in your case the command should be:
    ip nat inside source list PRIVATE pool mypool overload
    and did you apply “ip nat inside” to Fa0/0 and “ip nat outside” to S0/0 interface?

    If the problem still occurs, please upload your pkt file to http://www.certprepare.com/forum

    Also, the 192.0.2.113 address (of S0/0) is not included in the pool.

  42. Danilin
    April 25th, 2012

    @9tut

    Sorry for all the confusion a also thanks for the fast response….. maybe I was tired today at 2:30am and I did something wrong, because I just tried the Sim again with the “same commands” I used, but now they “magically” worked . ha ha ha :-)

  43. johnmaxwell
    May 3rd, 2012

    9tut,

    your configuration for this sim will not work unless the ISP router knows how to reach the 198.18.184.104/29 network. do we have to configure the ISP router in the exam? or is the network address already configured in the ISP? can we open the CLI of the ISP?

  44. 9tut
    May 3rd, 2012

    @johnmaxwell: You can’t configure the ISP router in the exam. The ISP router has been configured to send traffic back to Weaver.

  45. Thapa
    May 10th, 2012

    Hi,
    @9tut
    I am confused about “Bomar(config)#access-list 1 deny any” this command, just have a look on it and let me know please.

    A network associate is configuring a router for the Bomar Company to provide Internet access. The ISP has provided the company with six Public IP addresses of 198.18.237.225 198.18.237.230. The company has 14 hosts that need to access the Internet simultaneously. The hosts in the company LAN have been assigned private space addresses in the range of 192.168.16.33 – 192.168.16.46.
    The following have already been configured on the router:
    - The basic router configuration
    - The appropriate interfaces have been configured for NAT inside and NAT outside.
    - The appropriate static routes have also been configured (since the company will be a stub network, no routing protocol will be required)
    - All passwords have been temporarily set to “cisco”.
    The task is to complete the NAT configuration using all IP addresses assigned by the ISP to provide Internet access for the hosts in the Bomar LAN. You have successfully completed this exercise when the host PC can ping the ISP.
    Configuration Information:
    Router Name – Bomar
    Inside Global Addresses – 198.18.237.225 198.18.237.230/29
    Inside Local Addresses – 192.168.16.33 – 192.168.16.46/28
    Number of inside hosts – 14
    Given answer is as mentioned as:
    Bomar>ena
    Bomar#configure terminal
    Bomar(config)#access-list 1 permit 192.168.16.33 0.0.0.15
    Bomar(config)#access-list 1 deny any
    Bomar(config)#ip nat pool TestKiss 198.18.237.225 198.18.237.230 prefix-length 29
    Bomar(config)#ip nat inside source list 1 pool TestKiss overload
    Bomar(config)#interface fa0/0
    Bomar(config-if)#ip nat inside
    Bomar(config-if)#exit
    Bomar(config)#interface s0/0
    Bomar(config-if)#ip nat outside
    Bomar(config-if)#end
    Bomar# copy run start

    As I corrected is:
    Bomar>ena
    Bomar#configure terminal
    Bomar(config)#access-list 1 permit 192.168.16.33 0.0.0.15
    Bomar(config)#access-list 1 deny any
    Bomar(config)#ip nat pool TestKiss 198.18.237.225 198.18.237.230 netmask 255.255.255.248
    Bomar(config)#ip nat inside source list 1 pool TestKiss overload
    Bomar(config)#interface fa0/0
    Bomar(config-if)#ip nat inside
    Bomar(config-if)#exit
    Bomar(config)#interface s0/0
    Bomar(config-if)#ip nat outside
    Bomar(config-if)#end
    Bomar# copy run start

  46. John
    May 12th, 2012

    Today I passed with 986/1000 bcoz of God’s Grace & my effort also Thanx a lot to 9TUT.com & Examcollection.com. my sims were EIGRP, VTP, ACL2 frm 9tut. Total question 48. I solved those ques. very easily

    1) i advice you that u 1st clear ur concept using study materials & notes (use Todd lammle book.It’s very helpful)

    2) for dumps & Sims-> a) use 9tut. & other dumps are (Collisio.486q) (by.Jericho.632q)
    (Bruce.564q) (by.DHARANI.615q) in those dumps there is l’ll bit difference. so pls go through…
    get it from examcollection.com
    dont mug up only, understand the concept. in real exam options comes randomly.

    dont worry exam is very very easy if u follow these advise you will get above 900…………..100% true

    3) One question made ​​me confuse:–>

    In which circumstance are multiple copies of the same unicast frame likely to be transmitted in the Switched LAN?
    A. During high traffic periods
    B. In an improperly implemented redundant topology
    C. After broken links are re-established
    D. When upper-layer protocols require high reliability
    E. When a dual ring topology is in use

    I choose>B. In an improperly implemented redundant topology
    that’s why i lose 14 marks otherwise all ques 100% correct

    I think the correct ans is:–E. When a dual ring topology is in use

    Pls check out this ques

    Best of luck guys………………..

  47. Anonymous
    May 14th, 2012

    i got 986………..thank you so much for help 9tut……

  48. osama alkenani
    June 5th, 2012

    planning to do the exam on 20th this month if any one has a valid dumbs amd sim plz email me on alkenani_27@yahoo,com i really dont know how to get these dumbs and how to make sure they are valid plz hellllllllppppppp

  49. BMW
    June 7th, 2012

    @osama alkenani: Brother every thing is here on this site try to spare sometime and study here!

    Ali

  50. mohamed
    June 8th, 2012

    @john

    after searching for the question that you think you lose 14 points well actually, Your answer is write .
    B. In an improperly implemented redundant topology.
    look at this link fist question

    http://www.9tut.com/ccna-switch-questions-2

Comment pages
1 2 3 4 5 6 12 23
  1. No trackbacks yet.
Add a Comment