Home > CCNA NAT SIM Question 2

CCNA NAT SIM Question 2

February 5th, 2014 Go to comments

Question

ccna_nat_sim_lab_3

You work as a network technician at 9tut.com. Study the exhibit carefully. You are required to perform configurations to enable Internet access. The Router ISP has given you six public IP addresses in the 198.18.32.65 198.18.32.70/29 range.
9tut.com has 62 clients that needs to have simultaneous internet access. These local hosts use private IP addresses in the 192.168.6.65 – 192.168.6.126/26 range.
You need to configure Router1 using the PC1 console.
You have already made basic router configuration. You have also configured the appropriate NAT interfaces; NAT inside and NAT outside respectively.
Now you are required to finish the configuration of Router1.

Solution

Note: If you are not sure how NAT & PAT work, please read my Network Address Translation NAT Tutorial. You can download a similar sim to practice here: http://www.9tut.com/download/9tut.com_CCNA_NAT_sim_question.zip

The company has 62 hosts that need to access the internet simultaneously but we just have 6 public IP addresses from 198.18.32.65 to 198.18.32.70/29 => we have to use NAT overload (or PAT)

Double click on PC1 to access Router1′s command line interface

Router1>enable
Router1#configure terminal

Create a NAT pool of global addresses to be allocated with their netmask (notice that /29 = 248)

Router1(config)#ip nat pool mypool 198.18.32.65 198.18.32.70 netmask 255.255.255.248

Create a standard access control list that permits the addresses that are to be translated

Router1(config)#access-list 1 permit 192.168.6.64 0.0.0.63

Establish dynamic source translation, specifying the access list that was defined in the prior step

Router1(config)#ip nat inside source list 1 pool mypool overload

This command translates all source addresses that pass access list 1, which means a source address from 192.168.6.65 to 192.168.6.126, into an address from the pool named mypool (the pool contains addresses from 198.18.32.65 to 198.18.32.70)

Overload keyword allows to map multiple IP addresses to a single registered IP address (many-to-one) by using different ports

The question said that appropriate interfaces have been configured for NAT inside and NAT outside statements.

This is how to configure the NAT inside and NAT outside, just for your understanding:

Router1(config)#interface fa0/0
Router1(config-if)#ip nat inside

Router1(config-if)#exit

Router1(config)#interface s0/0
Router1(config-if)#ip nat outside

Before leaving Router1, you should save the configuration:

Router1(config)#end (or Router1(config-if)#end)
Router1#copy running-config startup-config

Check your configuration by going to PC2 and type:

C:\>ping 192.0.2.114

The ping should work well and you will be replied from 192.0.2.114

Other lab-sims on this site:

CCNA Access List Sim

CCNA NAT SIM Question 1

CCNA Frame Relay Sim

CCNA Configuration SIM Question (RIPv2 SIM)

CCNA VTP SIM

CCNA EIGRP LAB

CCNA Drag and Drop SIM

CCNA Implementation SIM

 

Comments
Comment pages
1 10 11 12 13 14 35
  1. Sergio
    May 28th, 2014

    @TechGoliath

    There’s no questions in the pkt file.. im assuming the questions are similar to the NAT lab sim here at 9tut.. am i correct??? if it is.. then it’s a piece of cake :)

  2. sony
    June 5th, 2014

    guys, have any one work out why this NAT Sim2 not working ? can’t ping to ISP 192.0.2.114
    ping from router is fine but not from testing PC

  3. Carlos
    June 6th, 2014

    try to run debugs, try to see if you are able to see the traffic reaching the router.
    Debug ip nat
    debug ip icmp
    If you can run those two commands while keeping a continuos ping going. you should be able to find the issue. Double check your ACL associated to the nat statement :D

  4. Jedi
    June 8th, 2014

    Admin, this pkt file is from question 1.

    You never ping the 192.0.2.114, because the Weaver interfaces and PC Ip Address are wrong.

    interface FastEthernet0/0
    ip address 192.168.100.30 255.255.255.240
    ip nat inside
    duplex auto
    speed auto
    !
    !
    ip nat pool CCNA 198.18.32.65 198.18.32.70 netmask 255.255.255.248
    ip nat inside source list 1 pool CCNA overload
    ip classless
    !
    access-list 1 permit 192.168.6.64 0.0.0.63

  5. Jedi
    June 8th, 2014

    Look the routing table in ISP, too.

  6. Jedi
    June 8th, 2014

    ip router 192.168.6.64 255.255.255.192 192.0.2.113

  7. Maani
    June 12th, 2014

    @sony
    Check ping status from PC which is connected to switch, not from PC which is connected with a router via Console port.

  8. chacuavip10
    June 15th, 2014

    If you want to ping the isp, double click on the cloud, Config>Frame relay tab, remove the existing link, change the second serial 0 > serial 1(101 auto > 102) then add. Ping should work. Sorry for my bad english

  9. phatt
    June 19th, 2014

    Sony re-do these configs

    Router1(config)#interface fa0/0
    Router1(config-if)#ip nat inside

    Router1(config-if)#exit

    Router1(config)#interface s0/0
    Router1(config-if)#ip nat outside

  10. Wamidh
    July 10th, 2014

    Passed 903 score today.
    Acl, acl2 eigrp labs I did the one exame

  11. Paul
    July 15th, 2014

    Hello there, im just new here. is the intention of this NAT is to show that when you ping from host to the serial ip it will show on router the translated ip address? cause im able to ping serial interface and applied nat in and out but it’s not translating

  12. Paul
    July 15th, 2014

    hahaa i yet realized that it will not work because the packets doesn’t exit to serial interface that’s why its most likely not working…

  13. Rohan
    July 17th, 2014

    For the .pkt file,we cannot add a pool of 192.168.32.65 – 192.168.32.70 as the ISP router accepts the traffic only from 192.0.2.0/24. Also, I tried to NAT the traffic with pool of 192.0.2.117 – 192.0.2.130 but the ISP router drops it. It works only if you NAT the traffic with interface IP of Serial 0/0 on Router1. Mistake in the .pkt file.

  14. Rohan
    July 17th, 2014

    Uhoh..my mistake..the .pkt file is proper and has no issues..

  15. Ranjith
    July 20th, 2014

    helo i m wrkng nat with gns 3 but i cant ping

  16. Ranjith
    July 20th, 2014

    any one plz tel me is nat wrkng in gns?

  17. Elshen
    July 24th, 2014

    Hi,please can anyone help me send the new Watson dumps to elshen.rehim@gmail.com

    Thanks

  18. lplpmc
    July 27th, 2014

    Looking for new Watson dumps as well, please email to lplpmc@gmail.com

  19. San
    August 12th, 2014

    Passed 958/1000
    Thanks 9tut! Exactly same EIGRP ACL ACL2 Sims…
    also went through dumps really helped a lot!!!..
    Whatson, Giilibeast, Jennie and Mathew Dumps (examcollection.com)
    All 51 questions were from dumps…
    even if u dont study book and only go though dumps a few times then you will pass easily…
    just remember the answers given in dumps…

  20. CCIETOBE
    August 16th, 2014

    Hi Friend,

    Wrote the exam this Aug 14.. Thanks 9tut! Exactly same EIGRP ACL ACL2 Sims…

    Everything was from Dumps.. BE carefull, even after trying so many times, I got nervous in exam and dint applied access list on interface caused 15 mins loss to me..

    Rest all is good.. Thanks to all 957/ 1000

  21. A.Md
    August 21st, 2014

    Hi,please can anyone help me send the new Watson dumps to amaro.macedo@outlook.com

    Thanks

  22. AAMIR
    August 22nd, 2014

    Hi, Pls send me the latest dump for CCNA 200-120.. email id is cavaliarz@gmail.com

  23. Anonymous
    August 22nd, 2014

    just do the nat overload on the int s0/0 and ping to the isp works fine.

  24. Ady
    August 22nd, 2014

    just do the nat overload on the int s0/0 and ping to the isp works fine.

  25. Hanna
    August 27th, 2014

    Is this lab is on acctual exam?

  26. JJ
    September 9th, 2014

    Sorry, dumps from examcollection.com is it mean the VCE file?

  27. Naidu yadla
    September 13th, 2014

    Hi friends i am taking exam on next week, can any one send me latest dump pls. at naiduyadla2010@gmail.com, pls..!

  28. Anonymous
    September 14th, 2014

    pls send the latest ccna dumps … am going to write the exam by this month… hemnath25@yahoo.com

  29. Saad
    September 16th, 2014

    Why the pool name is mypool ?
    Is it mentioned in the question ?
    Or any name can be used..

  30. 9tut
    September 16th, 2014

    @Saad: You can use any name you like.

  31. Rahul
    September 16th, 2014

    Hello friends… Go to ccnalearn.cf to know all about ccna / dumps / exam problems / new questions.. etc all for free.
    Hope it helps all to learn and clear ccna 200-120 exam. http://www.ccnalearn.cf

  32. Surohith
    September 17th, 2014

    There is no proper information about the subnet mask in the practice sessions. Please give the subnet mask for the practice session, and tell me do we need any routing protocols.

  33. nameless
    September 17th, 2014

    are there anybody who pass exam recently?can you tell me which lab sim are valid?

  34. Saad
    September 17th, 2014

    Can we use ? (Help) during configurations.. in exam..

  35. Reni
    September 19th, 2014

    Hi, Pls send me the latest dump for CCNA 200-120.. email id is reniyolandasari@ymail.com
    thanks

  36. Mahabatik
    September 20th, 2014

    I want to admission your CCNA BATCH# 129. CLASS START DATE: JUNE 01, 2013 CLASS SCHEDULE: SAT & THURS (6 – 9)pm,Note: pls give me your contcat number with contcat add and email address. i try many time your given cell (8816173 ext406) but not receive yet. please help me.

  37. CISCO-HD
    September 24th, 2014

    @vouchers

    don’t use these vouchers, you can get a lifetime ban on all future cisco exams and nullification of all previous certifications.
    BEWARE!!!!!!

  38. Naidu yadla
    September 25th, 2014

    i cleared the exam with 1000/1000..thanks 9tut..

  39. fathy
    September 29th, 2014

    plz could u send me latest dumps taking my exam this week fathyrf@gmail.com

  40. laka
    September 29th, 2014

    full video lap sim acl1 acl2 eigrp and dump ccna 120-200 question 314
    https://www.youtube.com/watch?v=Q7cTJsVxebc&list=PLF3JXcGq4iLEYCucsr8acdiUvZ-AF198e&index=1

  41. Anonymous
    September 29th, 2014

    plz confirm if Nat lab will be there in the exam…

  42. Anonymous
    October 3rd, 2014

    Hi,please can anyone help me send the latest Watson dumps to
    peter2001cheyo@gmail.com
    Thanks

  43. ALI
    October 15th, 2014

    me pass my ccna exam today
    i got 958

    thank you 9tut

  44. Shakhawat
    October 18th, 2014

    @ali
    pls tell name of Simulation

  45. majid hussain
    October 20th, 2014

    Check your configuration by going to PC2 and type:

    C:\>ping 192.0.2.114

    i check it work fine,, but the ip address for s0/0 is 192.0.2.113 ,, can someone please verify????

  46. Rabahov Ammarovic
    October 22nd, 2014

    i think ” Overload ” , won’t be used in this command , because it wants us to make dynamic nating not pating
    dynamic : many to many
    pating : many to one

  47. Aamir
    October 22nd, 2014

    For the Packet tracer, the following would be the statements

    interface FastEthernet0/0
    ip address 192.168.100.30 255.255.255.240
    ip nat inside
    duplex auto
    speed auto
    !
    interface Serial0/0
    ip address 192.0.2.113 255.255.255.0
    encapsulation frame-relay
    ip nat outside
    !
    ip nat pool mypool 198.18.184.105 198.18.184.110 netmask 255.255.255.248
    ip nat inside source list 1 pool mypool overload
    ip classless
    !
    !
    access-list 1 permit 192.168.100.16 0.0.0.15

  48. Anonymous
    October 23rd, 2014

    Hi all i am taking exam next week, can any one send me latest dump pls. at mr1retired98@yahoo.com

    Thanks

  49. FR
    October 24th, 2014

    NAT SIM2 was not working initially. I tried to check the default route on ISP router , but password “cisco” is not working. then I did the following to make it work

    Removed the ISP router (just because password is unknown)
    re-connected a 2811 router
    Added a serial card to 2811 router
    removed the cloud
    connected a serial DCE cable directly from Weaver to ISP router
    Checked Show controllers on both routers
    Configured clockrate command on Weaver which had DCE
    configured IP route 0.0.0.0 0.0.0.0 192.0.2.113
    Now Ping from PC to 192.0.2.114 is working.

    those having problem with ping try above and give feedback

    thanks FR

  50. FR
    October 25th, 2014

    Also the encapsulation to be changed to PPP

Comment pages
1 10 11 12 13 14 35
  1. No trackbacks yet.
Add a Comment