CCNA NAT SIM Question 1
Question
A network associate is configuring a router for the CCNA Training company to provide internet access. The ISP has provided the company six public IP addresses of 198.18.184.105 198.18.184.110. The company has 14 hosts that need to access the internet simultaneously. The hosts in the CCNA Training company LAN have been assigned private space addresses in the range of 192.168.100.17 – 192.168.100.30.
The task is to complete the NAT configuration using all IP addresses assigned by the ISP to provide Internet access for the hosts in the Weaver LAN. Functionality can be tested by clicking on the host provided for testing.
Configuration information
router name – Weaver
inside global addresses – 198.18.184.105 198.18.184.110/29
inside local addresses – 192.168.100.17 – 192.168.100.30/28
number of inside hosts – 14
|
The following have already been configured on the router： - The basic router configuration - The appropriate interfaces have been configured for NAT inside and NAT outside - The appropriate static routes have also been configured (since the company will be a stub network, no routing protocol will be required.) - All passwords have been temporarily set to “cisco” |
Solution
Note: If you are not sure how NAT & PAT work, please read my Network Address Translation NAT Tutorial. You can download this sim to practice here: http://www.9tut.com/download/9tut.com_CCNA_NAT_sim_question.zip
The CCNA Training company has 14 hosts that need to access the internet simultaneously but we just have 6 public IP addresses from 198.18.184.105 to 198.18.184.110/29. Therefore we have to use NAT overload (or PAT)
Double click on the Weaver router to open it
Router>enable
Router#configure terminal
First you should change the router’s name to Weaver
Router(config)#hostname Weaver
Create a NAT pool of global addresses to be allocated with their netmask (/29 = 255.255.255.248). There were reports that the simulator in the real exam did not accept “prefix-length” keryword so you should use “netmask” keyword.
Weaver(config)#ip nat pool mypool 198.18.184.105 198.18.184.110 netmask 255.255.255.248
Create a standard access control list that permits the addresses that are to be translated
Weaver(config)#access-list 1 permit 192.168.100.16 0.0.0.15
Establish dynamic source translation, specifying the access list that was defined in the prior step
Weaver(config)#ip nat inside source list 1 pool mypool overload
This command translates all source addresses that pass access list 1, which means a source address from 192.168.100.17 to 192.168.100.30, into an address from the pool named mypool (the pool contains addresses from 198.18.184.105 to 198.18.184.110)
Overload keyword allows to map multiple IP addresses to a single registered IP address (many-to-one) by using different ports
The question said that appropriate interfaces have been configured for NAT inside and NAT outside statements.
This is how to configure the NAT inside and NAT outside, just for your understanding:
Weaver(config)#interface fa0/0
Weaver(config-if)#ip nat inside
Weaver(config-if)#exit
Weaver(config)#interface s0/0
Weaver(config-if)#ip nat outside
Weaver(config-if)#end
Finally, we should save all your work with the following command:
Weaver#copy running-config startup-config
Check your configuration by going to “Host for testing” and type:
C:\>ping 192.0.2.114
The ping should work well and you will be replied from 192.0.2.114
Other lab-sims on this site:
CCNA Configuration SIM Question (RIPv2 SIM)
- The appropriate static routes have also been configured (since the company will be a stub network, no routing protocol will be required.) ip route 0.0.0.0 0.0.0.0 s0/0 is not put in the answher
why – The appropriate static routes have also been configured (since the company will be a stub network, no routing protocol will be required.) ip route 0.0.0.0 0.0.0.0 s0/0 is not put in the answer???
I passed last week….thanks 9tut for your great stuff……
why here the WCM = 0.0.0.15 any help please????
Sorry, if you use PAT, you have to config follow:
ip nat inside source list 1 interface serial 0/0 overload
Then you can ping from local to ISP.
What is the probability that this sim will appear in the exam?
Dear Friends, please send to me the latest Dumps and SIM to
my E-mail: Romeo_Bahrain@Hotmail.com, my Exam will be in 28.06.12
i don’t have enough time to study all the book or this site i’m no IT but i have to pass to get my increment, 9tut is very nice site and very helpful, thanks 9tut and thanks to all.
THX binhnguyenduc, with applying the list to the interface it now works!!!
hi….. in this sim after configuration nat i cant got the ping 192.0.2.114 in pc1
whyyyy?
Hi john,
can u please send me dumps by (Collisio.486q) (Jericho.632q)
(Bruce.564q) (DHARANI.615q) in my mail id :shikharai2008@yahoo.com.
Thanks
john the correct answer is in an impropely implemented topolog and this realy happen when you not configured stp to block ports
Hi Everyone, I am new to this forum, I have been studying endlessly and today I failed my ICND 2 exam. Can someone please send me the latest dumps please I understand most of the material I know all evidence to the contrary but I am taking the exam again next Friday I would really like to pass
any advice would be greatly appreciated
please email me at maximusb246@gmail.com
Please any help and good advice again would be greatly appreciated!!!!
Thanks everyone for their time and patience!!!
Best Regards,
Mike
I just miss my exam with a score of 788,
access-list 1 permit 192 …. 0 …… does not work (incompatible version with this command)!
52 questions
90 minutes (in French)
time is very inadequate
taking he test next saturday morning can somebody confirm is this sims are veru close to the r4eal exam? please e-mail any updates to vbenavides58@yahoo.com
hi,
in ccna exam do they give the ” /29 ” ??
like in ” inside global addresses – 198.18.184.105 198.18.184.110/29 ”
do they mention the ” /29 ” there????
how can i view all the .vce files . i have a player but its only a trial version which allow only 5 questions. Please help me on this
nawab.ansh@gmail.com
thanks :)
inside local addresses – 192.168.100.17 – 192.168.100.30/28
this is wrong.these addresses belongs to two networks
192.168.100.112/28
192.168.100.128/28
so how to assign the acl?
hello friends….Thank GOD…I passed ccna few minutes ago….I got 930..Thanks to 9tut,Jericho,Collisio,Bruce and more exam collection..The sim was eigrp with as no:112,VTP and ACL…And guyz I did a biggest mistake such that during VTP sim after the first question I press next…So I lost the chance for the 4 remaining vtp sims..:( be careful…no need to worry…any help text me ani_tech4u@yahoo.com
@newbie
inside local addresses – 192.168.100.17 – 192.168.100.30/28
This is right, addresses in the same net, because of prefix 28 our magic number is 16, do all net starts from 0 16 32 48 64 and so on.
So range from 17 and 30 in the same network.
Ta
sorry yes mike.you are correct.thanks a lot
Hi passed the exam with 960 marks. thaks to 9tut &prepking dumps. EIGRP, ACL & VTP sim was there….
If you’re looking to buy these articles make it way eaeisr.
@anish.. I did the same thing and clicked next on the EIGRP sim and lost all points.. only I failed :-(
I’m taking it again next Thursday.. Would anyone know if I should get the same sims as long as they’re giving them to everyone else?
what I mean is they don’t change the sims just because I’m taking it over again??
i have a question for 9tut if i faild 3 weeks ago they change the labs for the next chance cause i m gonig to try again the next monday. thanks for you answers.
passed the exam with 894 points.made mistake in the access-list sim,instead of applying the access-list to Fa0/1 interface so that the access-list can filter traffic coming from both the LAN and the Core networks,i applied it to fa0/0 interface which resulted in me have 0%,so be careful especially in access-list questions
Access-list questions:The task is to create and apply a numberd access-list with no more than three statements that allow Host D should be able to use a web browser(HTTP)to access the Finance Web Server.
-Other types of access from host D to the Finance Web Server should be blocked
– All access from hosts in the Core or local LAN to the Finance Web Server should be blocked
-All hosts in the Core and local LAN should be able to access the Public Web Server
Solutions:
Router#configure terminal
Router(config)#access-list 100 permit tcp host x.x.x.x host x.x.x.x eq 80
-Other types of access from host D to the Finance Web Server should be blocked
– All access from hosts in the Core or local LAN to the Finance Web Server should be blocked
Router(config)#access-list 100 deny ip any host x.x.x.x
-All hosts in the Core and local LAN should be able to access the Public Web Server
Router(config)#access-list 100 permit ip any any
Apply this access-list to Fa0/1 interface (outbound direction)
Router(config)#interface fa0/1
Router(config-if)#ip access-group 100 out
Router(config-if)#end
Router#copy running-config startup-config
EIGRP Questions:the same as 9tut but they use home 1 and home 2
Home 2 just change the AS number from 22 to 122.nothing else
Home 1 just remove one network 192.168.96.0 and add a new network 192.168.88.0.The passive interface willnt be removed because because of link between home 1 and ISP.
VTP Questions
Remains the same as 9tut but small modifications like 1)using show mac address-table to find a port of a particular mac address
2)using show spanning-tree and show cdp neighbors to get the root bridge
3)Use of show vtp status.SWac3 revision no is higher than SwX so u have to replaced the vlan
4)Use of show vlan to get the default gateway of an interface
Try and go through examcollection.com especially 9tut,Jericho,Bruce and Collision
In the exam there is limited time so try and be fast so that time doesnt choke you,a sim may take you 30 minutes to resolve the issue like what happened to me in access-list today,i was just rushing the question because i was have 10 minutes left to 17 multiple choice questions and VTP sim
Goodluck in your exams
@ stellamaris, Thanks a lot. I’m taking the exam in 4 hours and knowing what the popular sims on it really helps me out. I should be good due to the fact that I’ve completed all of the 9tut packet tracer labs numerous times. For my study, i’ve used 9Tut, Pass4Sure, exam collection, and ICND 1 and 2 from Cisco.
Since it’s about dynamic NAT overload, after using host PC to test ping, you can go further check the NAT table entries using show ip nat translations, and the table will shows the entries with the IP addresses with the ports. Only entries show up after performing the test ping from the host.
@stellamaris
i will be taking my exam next Mon 30 July…thanks a lot for the good hint :)
Did anyone get NAT sim in the exam??
hi friends i pass ccna exam yesterday
and i scored 960/1000
And i cleared this exam by just
studying 5days only
i have done it with the help of the
following 1.bruse dump
2.colliso dump
3.9tut 10 sim ques enough for crack
ccna exam
if u want any sugestions regarding
exam feel free to contact me at aman.mim80@gmail.com
cool passwd with 1000
can some one sent to me last dumps ihave to years trying take exam but iam afraid pleeze help me _ihad vce but only with 5 quit pleese sent to me vce to .thanks with love my email mezo_azo@hotmail.com
What’s the difference between NAT Sim and NAT2 Sim?
This sim did not work for me at first.
I tried this and it did not work.
“ip nat inside source list 1 pool mypool overload”
Then I tried this thinking could be the configured differently. But sitll did not work.
“ip nat inside source list 1 interface Serial0/0 overload”
I thought of power cycling all devices – HA! It worked – for both commands. So either will work. :D
Can we used extended access-list at NAT?
Weaver(config)#access-list 1 permit 192.168.100.16 0.0.0.15
Hellow everyone. Am actually taking the ccna paper tomorrow morning 12th Sept. Anybody plse with some latest updates so far. I would appreciate.
thanks!
I am also writing the paper for the second time after scoring 815 the last time. And I met the EIGRP question with a hub connecting to the ISP. I was abit shaken though to find a different device rather than the router. But I guess the device could a layer 3 switch which is capable of the routing. Hey did somebody out there find a question like this, anyway. I would appreciate the sharing so much.
John Karago(TZ)
Helllllloooooo guys. I passed my exam last Wednesday with a hit of 907. I was really happy. The questions were all the same from the dumps(SHEKAR). Only a very very few were new. Nonetheless the new qns had the same concept rounding off. The sims were the usual EIGRP, ACL & VTP. Only in ACL there was just alittle play around, this time it was host B. The EIGRP a new router was added. And well there is something to note on the VTP sim. The show mac-address-table is a bug to the sim. Therefore, you can either use show mac or rather show mac address-table.
My thanks to the 9tut online community, to my colleagues Denis & Rogers, my teachers, and to God almighty. I wish you all the best guys. I’m going for the CCNA security soon and am planning to take my exam this coming October. And I hope to eat Christmas with my CCNP. cheers and all the best!
hi friends today m very happy because i have cleared CCNA thanx to 9tut & Examcollection.
@9tut or @xallax or @anyone..
where did you get 192.0.2.114?
or can we use any public ip add to check if the configuration works?
@kai: That’s IP is given in the exhibit. In fact, we can use any public ip. Just make sure your ISP router has a default route to Weaver router.
Just now i have completed my CCNA.
Thanks 9tut…
guys
does any one know
from where can i get the materials for 642-974
That test was retired on May 7 2012
http://www.cisco.com/web/learning/le3/current_exams/642-971.html
http://www.cisco.com/web/learning/le3/le11/learning_retired_certification_exams_list.html
Opps wrong link
http://www.cisco.com/web/learning/le3/current_exams/642-974.html
Does anyone know if the name of the pool matters, as long as it’s in the NAT statement correctly? Such as WeaverPool instead of mypool? I was curious if Cisco would whack you a few points for this?
Hi guys! Just want to ask to those who take their exam last week. What was the topics included in the lab? Thanks.
When u use Nat OVERLOAD, U don’t need to create a pool. The correct command is
access-list “acl number” permit “N/W ID” “wild card mask”
ip nat inside source list “acl number” interface “port number” overload
That’s the advantage of nat overload or PAT(port address translation) , it dont require pool of ip address
@ akkii In the scenario you have a public IP range of 198.18.184.105-198.18.184.110. That’s why you need a pool. Your command would work using the interface but most of the assigned addresses would be wasted. I think 9tut has it right, Cisco wants you to utilize all the assigned addresses. So a pool is needed.