Home > CCNA NAT SIM Question 2

CCNA NAT SIM Question 2

February 5th, 2014 Go to comments

Question

ccna_nat_sim_lab_3

You work as a network technician at 9tut.com. Study the exhibit carefully. You are required to perform configurations to enable Internet access. The Router ISP has given you six public IP addresses in the 198.18.32.65 198.18.32.70/29 range.
9tut.com has 62 clients that needs to have simultaneous internet access. These local hosts use private IP addresses in the 192.168.6.65 – 192.168.6.126/26 range.
You need to configure Router1 using the PC1 console.
You have already made basic router configuration. You have also configured the appropriate NAT interfaces; NAT inside and NAT outside respectively.
Now you are required to finish the configuration of Router1.

Solution

Note: If you are not sure how NAT & PAT work, please read my Network Address Translation NAT Tutorial. You can download a similar sim to practice here: http://www.9tut.com/download/9tut.com_CCNA_NAT_sim_question.zip

The company has 62 hosts that need to access the internet simultaneously but we just have 6 public IP addresses from 198.18.32.65 to 198.18.32.70/29 => we have to use NAT overload (or PAT)

Double click on PC1 to access Router1′s command line interface

Router1>enable
Router1#configure terminal

Create a NAT pool of global addresses to be allocated with their netmask (notice that /29 = 248)

Router1(config)#ip nat pool mypool 198.18.32.65 198.18.32.70 netmask 255.255.255.248

Create a standard access control list that permits the addresses that are to be translated

Router1(config)#access-list 1 permit 192.168.6.64 0.0.0.63

Establish dynamic source translation, specifying the access list that was defined in the prior step

Router1(config)#ip nat inside source list 1 pool mypool overload

This command translates all source addresses that pass access list 1, which means a source address from 192.168.6.65 to 192.168.6.126, into an address from the pool named mypool (the pool contains addresses from 198.18.32.65 to 198.18.32.70)

Overload keyword allows to map multiple IP addresses to a single registered IP address (many-to-one) by using different ports

The question said that appropriate interfaces have been configured for NAT inside and NAT outside statements.

This is how to configure the NAT inside and NAT outside, just for your understanding:

Router1(config)#interface fa0/0
Router1(config-if)#ip nat inside

Router1(config-if)#exit

Router1(config)#interface s0/0
Router1(config-if)#ip nat outside

Before leaving Router1, you should save the configuration:

Router1(config)#end (or Router1(config-if)#end)
Router1#copy running-config startup-config

Check your configuration by going to PC2 and type:

C:\>ping 192.0.2.114

The ping should work well and you will be replied from 192.0.2.114

Other lab-sims on this site:

CCNA Access List Sim

CCNA NAT SIM Question 1

CCNA Frame Relay Sim

CCNA Configuration SIM Question (RIPv2 SIM)

CCNA VTP SIM

CCNA EIGRP LAB

CCNA Drag and Drop SIM

CCNA Implementation SIM

 

Comments
Comment pages
1 2 3 4 14 35
  1. binz
    March 16th, 2011

    please send me latest ccna 640-802 dumps and labs

  2. binz
    March 16th, 2011
  3. Anonymous
    March 16th, 2011

    sens mee too

    Nakasit1@hotmail.com

  4. Jim
    March 24th, 2011

    Wow, I would so wonder if some of these people on here studied at all! HOW could you ask where 63 comes from this far in the game, if you are studying? Or are you just looking to CHEAT?

  5. Anonymous
    March 25th, 2011

    Email to to me too ciklie2001@yahoo.com

  6. WasReady
    March 25th, 2011

    I used pass4sure 3.22 as a brain dump. I think testinside 1714 is better

  7. WasReady
    March 25th, 2011

    If you have a copy of testinside 1714 ssnd it to me. I’ll try to send you a copy of pass4sure 3.22. alcnna1217@yahoo.com

  8. mohit
    April 8th, 2011

    passforsure is a better option and take pearsonvue books they will surely help u

  9. Ice Man
    April 8th, 2011

    “192.168.0″ Sorry I forgot 6
    You have to count from start address 192.168.6.0 last address 192.168.6.63 = 64 address
    192.168.6.0 = 1 address
    192.168.6.0 – 192.168.6.63 = 63 address
    1+63 = 64 address

    You have to count from start address 192.168.64 last address 192.168.6.127 = 64 address
    192.168.6.64 = 1 address
    192.168.6.64 – 192.168.6.127 = 63 address

    Network /26 255.255.255.128
    64 address per Bloc
    You have 62 for host
    Cant use first address in rang is use for network address and last address use for network broadcast address

    192.168.6.0 – 192.168.6.63 = 64 address
    192.168.64 – 192.168.6.127 = 64 address
    62 clients that needs to have simultaneous internet access. These local hosts use private IP addresses in the 192.168.6.65 – 192.168.6.126/26 range.
    192.168.64 is the start of the address range
    and you use 192.168.6.64 wildcard mask of this ip 0.0.0.63

    Hope this is understandable I’m learning this myself now.

    1+63 = 64 address

    wildcard bitmask

    Calculating wildcard masks can be difficult, but you can do it
    easily by subtracting the subnet mask from 255.255.255.255.
    Example 1: assume you wanted to permit access to all users in
    the 192.168.3.0 network.
    –Because the subnet mask is 255.255.255.0, you could take the
    255.255.255.255 and subtract from the subnet mask.
    –The solution produces the wildcard mask 0.0.0.255.
    Example 2: Now assume you wanted to permit network access
    for the 14 users in the subnet 192.168.3.32 /28. The subnet mask
    for the IP subnet is 255.255.255.240,
    –take 255.255.255.255 and subtract the subnet mask
    255.255.255.240
    –The solution this time produces the wildcard mask 0.0.0.15.
    Example 3: assume you wanted to match only networks
    192.168.10.0 and 192.168.11.0.
    –take 255.255.255.255 and subtract the subnet mask 255.255.254.0.
    –The result is 0.0.1.255

    wildcard mask 0.0.0.63
    network :
    These local hosts use private IP addresses in the 192.168.6.65 – 192.168.6.126/26 range.
    /26 =255.255.255.192

    255.255.255.255
    -
    255.255.255.192
    = 0 . 0. 0. 63 wildcard mask

  10. **Somalia**
    April 9th, 2011

    SIMPLE EXPLANATION WOULD BE……………

    HOST IP’S RANGE = 192.168.6.65 – 192.168.6.126 (THESE ARE ADDRESSES THAT CAN BE ASSIGNED TO THE HOSTS)

    NOTE: WE NEED TO PROVIDE THE N/W RANGE IN THE ACCESS-LIST ——-> SO THE N/W RANGE WOULD INCLUDE TWO MORE IP’S, WHICH ARE THE NETWORK ID(FIRST IP IN THE N/W IP RANGE) AND THE BROADCAST IP (LAST IP ADDRESS) ———-> SO THIS MEANS WE HAVE TO ADD THOSE SO WE CAN HAVE THE N/W RANGE ———> 192.168.16.64( .64 = N/W ID) – 192.168.16.127(.127=BROADCAST IP)

    ALSO YOU CAN THINK OF THE /26 AND FIND THE INCRE., WHICH WOULD BE 64 ——> SO “/26″ NETWORKS HAVE THE NETWORK RANGES: XXXX.XXXX.XXXX.0 – XXXX.XXXX.XXXX.63
    XXXX.XXXX.XXXX.64 – XXXX.XXXX.XXXX.127

  11. kamui
    April 12th, 2011

    hi guys,

    why I could not ping any IP of my ip nat pool mypool 198.18.32.65 198.18.32.70 from router and any host ??

    thx

  12. Sahil Prashar
    April 16th, 2011

    Is there any change in dumps with in last 2 months….

  13. jambo
    April 17th, 2011

    hi all pls dump me z latest lab exam

  14. SOHAIL
    April 21st, 2011

    Hi,

    @9tut..
    its saying in the question to click on the pc console to gain access to Router1.
    My question is that will I get the access directly after clicking the PC or I need to telnet?
    please help me ..

  15. jnbasstango
    April 26th, 2011

    Hi, i have a pass4side version 4.28 dumps, is that the latest? jnbasstango@yahoo.fr

  16. Jehangt3
    April 29th, 2011

    I did the answer on a notepad without looking at the answer, but the only mistake I made was I used last IP 192.168.6.126 instead of 192.168.6.64 for the interface. I learnt to put 192.168.6.126 from CCNA NAT SIM Question 1

    here was my answer

    access-list 1 permit 192.168.6.126 0.0.0.63
    ip nat pool NATPOOL 198.18.32.65 198.18.32.70 netmask 255.255.255.248
    ip nat inside source list 1 pool NATPOOL overload

    ————————————————————————————————

    access-list standard MYPOOL
    permit 192.168.6.126 0.0.0.63

    ip nat pool NATPOOL 198.18.32.65 198.18.32.70 netmask 255.255.255.248
    ip nat inside source list MYPOOL pool NATPOOL overload

    interface fastethernet 0/0: ip nat inside
    interfasce serial 0/0: ip nat outside

  17. Ebere
    May 5th, 2011

    hi guyz, i will write my exam soon, pls can any one send me the lates dump. thanks. hanwins2008@yahoo.com

  18. R.More
    May 6th, 2011

    Hey guys m givin the CCNA xam 2moro…heard that the dumps v17.14 are no longer valid….Can ne1 tell me who has givin the xam recently like after april 5th…. Plz let me knw at the earliest…..R More.

  19. R.More
    May 6th, 2011

    i have give me ccna practical tips

  20. JoshHD
    May 9th, 2011

    DId anybody take the CCNA exam recently? Did this sim came in the test?

    Most people tell me they got 3 Sims and they where the ACL2, EIGRP and VTP one.

  21. Am
    May 11th, 2011

    Can we use TAB button in the exam or what???

  22. litz
    May 17th, 2011

    hey guys i know that i shouldnt be askin this but

    i’m havin this error when i key in the subnet for my packet tracer question
    router int fa0/0
    ip add 192.168.6.64 255.255.255.192 cuz it’s /26 right?
    but after i enter i’m havin Bad mask /26
    why ?
    is it cuz the subnet muz be 255.255.255.128? and why 128 instead of 192 for /26

  23. dika
    May 18th, 2011

    Already pass the exam todaay… yeeeeaaaaY… 920/1000

    lot of new question, maybe around 15 Q from acme and jakes 647Q.

    Lab VTP, ACL n EIGRP same tolopolgy with 9tut, but the case and ip was different.

    any question just mail me at fahmi_fistha65(at)yahoo(dot)co(dot)uk

    good luck to you guuys…

  24. Manojkumar
    May 19th, 2011

    hi friends im passed ccna score is 907 thank you 9tut.com because 3 lab question are above example just change the ip and network only.but oneword questions are 35 questions are out of dumps so becarefull only follow the books and concepts side is very strong

  25. Saravana
    May 21st, 2011

    Litz,

    your ip add is not valid. It’s a network id. /26 means the incremental value will be 64. so use 65 to 126.

  26. hassan
    May 23rd, 2011

    hi Every body ,my Exam after 2 days ,i study well but am afraid too can any body send me the last dumps ,i will be thankfull
    hassan_salamah@hotmail.com

  27. wayne
    May 30th, 2011

    Can someone kindly send me the latest dumps for CCNA 802 exam to cts1234586@hotmail.com
    Many Thanks

  28. Zuhaib
    May 30th, 2011

    I can’t access ISP’s Router…when I ping that Router than I get a message “Destination host unreachable” please help me in this regards while I do basic configuration on my both routers and allow NATing as mention in this SIM…So why I get an error of DESTINATION HOST UNREACHABLE….. I think connection between two Routers is not correct that’s y I got an error…

    Please seniors help me….and also tell me where I am making a mistake in topology.

    Regards
    Zuhaib Siddiqui.

  29. Dol
    June 2nd, 2011

    Hi,

    About NAT Sim why we don’t have route or default route to destination, if the real world when we configure NAT we need to have default route. and if the Sim appear in exam can we configure default route or not?

    Please help me about that point.

    Thank you,

    Dol Meun

  30. Qudus
    June 2nd, 2011

    can any1 plz send me d latest ccna dumps my exam is monday. email qudusyusuf33@yahoo.com

  31. thameem
    June 3rd, 2011

    In real time why we are moving to NAT and tell me purpose

  32. GURUPRASAD from India
    June 3rd, 2011

    Hi Everyone,
    Here you go the link of dumps
    So it useful for exam
    From these 3 dumps u get definetly 100% and also look into the Hotspot of 9tut questions and Simulations.
    http://www.4shared.com/get/O2yJIKud/TIS_640-802_v2124_436Q.html
    http://www.examcollection.com/cisco/Cisco.acme.640-802.v2011-04-20.356q.vce.file.html (from 1st and 2nd u may get 70% of Questions for Exam)
    and
    http://www.4shared.com/document/JfUv-P4w/TK_640-802_v218_New_Question_a.html (remaining 30% u get from this new version update TestInside 218) and don’t forget look into 9tut simulation and hotspot
    Sorry i can’t mail everyone into individual
    So i update in 9tut and Exam collection and it will use for all
    Note:
    Dont worry about commands you can use short commands in CLI (command line interface) as shown below:
    1. Show mac address-table you can write in short show mac + tab it will appear full command (and please be noted don’t use show mac-address-table use only show mac address-table(don’t use ‘-‘ between mac and address, because the reason is, In new switches don’t use show mac-address-table it will commanded as show mac address-table keep it in mind this one(The command show mac address-table will display the forward/filter table, also called a CAM table on a switch))
    2. Show running-config you can use as show run
    3. Copy running-config startup-config you can use as copy run start
    4. And more short command you can use CLI
    5. In EIGRP don’t forget to add no-auto summary that to new added router because The network considered a discontiguous network because you have one classful address subnetted and separated by another classful address. Only RIPv2, OSPF, and EIGRP can work with discontiguous networks, but RIPv2 and EIGRP won’t work by default. You must use the no auto-summary command under the routing protocol configuration.
    6. And don’t forget to ping to all routers when u doing lab in EIGRP and ACL don’t forget to ping and web browser to check okay
    Please understand the concept and take exam when u read each question understand why this is the answer that one you know.
    And Be carefull in Switching means you get one question which is root, designated by four switch mac address least mac-address will be the root bridge that port is connect to other switch. The root bridge receiving from other port that is root and second lower mac address is designated to other switch but not to root bridge.
    Thank u 9tut and Exam collection
    Any Regard Query or Question
    Update comments in the 9tut or examcollection comments.

  33. Peachy
    June 14th, 2011

    Hi Friends, I am taking the exam on the 19th of june can you pls send me the latest exam dump. I still feel so lost and I have almost gone through everything.

  34. Nigel
    June 16th, 2011

    Is anyone able to download this sim ?

  35. Mr Guy
    June 16th, 2011

    Hi Nigel,

    Link appears dead. Here is a link that includes a load of the sims from this site, maybe all. It has the nat sim in it. http://www.9tut.com/download/CCNA_DragDrop_EIGRP_RIP_NAT_and_implementation_LabsInPacketTracer.zip

  36. ramya
    June 17th, 2011

    hi i taking my exam on 20th june and ia m very much scared abt it. plz anybody tell me whether we get the lab sim as in this website

  37. Omar
    June 26th, 2011

    guys is there any deffrent when u configur ip nat inside or outside at any interface?

  38. see-see-NA
    June 29th, 2011

    when u have to apply nat on inside interface we use nat inside,and when we have to apply nat on outside interface we use nat outside.inside and outside are interfaces!

  39. Neha
    July 2nd, 2011

    Hey all, Am I the only one who is not able ping from the ‘host for testing’ PC1 to 192.0.2.114 ? I have configured the exact same steps on the Weaver, still not able to ping .. Someone please help.

  40. dinesh
    July 6th, 2011

    @9tut
    hello i have a doubt that in the exam in the simulation question once if we enter the router’s CLI then if we have some doubt on the diagram can we get back to diagram and verify and then enter the routers CLI again.. please help

  41. Dmitri
    July 6th, 2011

    @9tut
    Is there a need in the exam to add a default route in some way?

  42. 9tut
    July 7th, 2011

    @Dmitri: No, don’t worry about that. Just do what are required.

  43. emb
    July 9th, 2011

    @ 9tut This configuration that you said is for UNDERSTANDING. DO WE HAVE TO TYPE THIS CONFIGURATION IN THE EXAM (IT IS NECESSARY TO PUT IT) ?

    Router1(config)#interface fa0/0
    Router1(config-if)#ip nat inside

    Router1(config-if)#exit

    Router1(config)#interface s0/0
    Router1(config-if)#ip nat outside

  44. 9tut
    July 10th, 2011

    @emb: In the exam you don’t need to put these commands. Just do the “show run” and you will see these commands were configured.

  45. dhusk
    July 11th, 2011

    @9tut,
    I recently missed the passing score by just a little the last time I took it. I am signed up to take again this week and want to know if the sims will be the same with just a few modifications, or if the exam will have completely different sims? My sims were VTP, EIGRP, and ACL2. Had I known about this site earlier, I may have had a better shot, but want to know if others have not passed, and how their second exam looked like. I really want this so much, but concerned if I may be studying the wrong material. Thank you.

  46. 9tut
    July 12th, 2011

    @dhusk: You will see same sims in your next try. For more useful information about this exam please read: http://www.9tut.com/ccna-faqs-a-tips

  47. kenren
    July 18th, 2011

    hello guys, i just want to ask if the subnetmask of inside global address is given in the real exam? because some lab sim question that i encounter about the nat, the subnetmask is not given, so i wonder if in the real exam the subnetmask in really given?. thank you very much.

  48. sen
    July 19th, 2011

    would this be in icnd? or just ccna

  49. Vivek
    July 19th, 2011

    Hi…I will soon appear for CCNA exam could any one plz tell who has given the paper in last 1 week what all labs are there in exams.

    Ur revert would really help..

    Thanks.

Comment pages
1 2 3 4 14 35
  1. No trackbacks yet.
Add a Comment