CCNA NAT SIM Question 2
Question
You work as a network technician at 9tut.com. Study the exhibit carefully. You are required to perform configurations to enable Internet access. The Router ISP has given you six public IP addresses in the 198.18.32.65 198.18.32.70/29 range. 9tut.com has 62 clients that needs to have simultaneous internet access. These local hosts use private IP addresses in the 192.168.6.65 – 192.168.6.126/26 range. You need to configure Router1 using the PC1 console. You have already made basic router configuration. You have also configured the appropriate NAT interfaces; NAT inside and NAT outside respectively. Now you are required to finish the configuration of Router1. |
Solution
Note: If you are not sure how NAT & PAT work, please read my Network Address Translation NAT Tutorial. You can download a similar sim to practice here: http://www.9tut.com/download/9tut.com_CCNA_NAT_sim_question.zip
The company has 62 hosts that need to access the internet simultaneously but we just have 6 public IP addresses from 198.18.32.65 to 198.18.32.70/29 => we have to use NAT overload (or PAT)
Double click on PC1 to access Router1′s command line interface
Router1>enable
Router1#configure terminal
Create a NAT pool of global addresses to be allocated with their netmask (notice that /29 = 248)
Router1(config)#ip nat pool mypool 198.18.32.65 198.18.32.70 netmask 255.255.255.248
Create a standard access control list that permits the addresses that are to be translated
Router1(config)#access-list 1 permit 192.168.6.64 0.0.0.63
Establish dynamic source translation, specifying the access list that was defined in the prior step
Router1(config)#ip nat inside source list 1 pool mypool overload
This command translates all source addresses that pass access list 1, which means a source address from 192.168.6.65 to 192.168.6.126, into an address from the pool named mypool (the pool contains addresses from 198.18.32.65 to 198.18.32.70)
Overload keyword allows to map multiple IP addresses to a single registered IP address (many-to-one) by using different ports
The question said that appropriate interfaces have been configured for NAT inside and NAT outside statements.
This is how to configure the NAT inside and NAT outside, just for your understanding:
Router1(config)#interface fa0/0
Router1(config-if)#ip nat inside
Router1(config-if)#exit
Router1(config)#interface s0/0
Router1(config-if)#ip nat outside
Before leaving Router1, you should save the configuration:
Router1(config)#end (or Router1(config-if)#end)
Router1#copy running-config startup-config
Check your configuration by going to PC2 and type:
C:\>ping 192.0.2.114
The ping should work well and you will be replied from 192.0.2.114
Other lab-sims on this site:
CCNA Configuration SIM Question (RIPv2 SIM)
When we get the LAB sims on the exam, do we need to write the whole cmd or can we use TAB to see the cmd?
Yves no, no te permite usar TAB, asi que lo mejor es que te sepas de memoria los comandos
please i need CCNP dumps if any one have ,, i’ll b grareful ,, if any one could sent it to this email add .. burhan.hussaini@live.com
@SilverStone 192.168.6.65/26
access-list 1 permit 192.168.6.64 0.0.0.63
What is the purpose of 0.0.0.63 ???? total addressesof the subnet have to mention, else have to mention the last address of the previous subnet.
e.g 192.168.20.129/26
access-list 1 permit 192.168.20.128 (0.0.0.127 or 0.0.0.63 ) ?????
please guide me dear….
HI I am Saidul Islam Talukder from Bangladesh, I am thinking to sit CCNA exam. so if any one have CCNA current dump. please send me to the below address saidultalukder@yahoo.com and it will be great help if any one send me.
Thanks
Saidul Islam Talukder.
I applied all commands for NAT but ping from PCs could not be successful
ip nat pool mypool 198.18.184.105 198.18.184.110 netmask 255.255.255.248
access-list 1 permit 192.168.100.17 0.0.0.15
ip nat inside source list 1 pool mypool overload
Interface fa0/0
ip nat inside
interface se0/0
ip nat out
Please help !!
@Raaz i think you should have used access-list 1 permit 192.168.100.16 0.0.0.15 instead of access-list 1 permit 192.168.100.17 0.0.0.15. notice that 192.168.100.16 is the network address
@ Raaz, I agree with iza. When applying an ACL to an interface you have to be careful. If it is for a range of ip’s, you have to use the network address with wildcard mask, if it is for a specific host, you use the host ip.
Hi,
I made this lab but I tried ping to 192.0.2.114, it’s unseccessful. My configuration ise true although not ping. Help please.. I wonder this configuration didn’t run in packet tracer ??
Thanks
iam writing ccna next week- im still preparing. please send me latest sakhar dumps in pdf.
email coodsie@yahoo.com
or vce with crack
To sit for the ccna exam next month and i real need dumps pliz anyone with,send to email:olesimbe@yahoo.com. Thanks a lot!!.
I took the icnd2 this morning got shocked a lot of simulations . frame-relay, vtp, ospf i can’t remember the rest brain fried it was a total of 5 sims. all were the same as shown on this site, no nat or access-list. Pass4sure questions was an absolute help. I made 970 little disappointed oh well i passed. Good luck everyone.
thanks IZA n scttw15 ;)
Hi , if any one want these materials :
1- CCNA Labs for the real world which is include:
6 phase Files (each phase include :PDF Scenario with Objectives ), GNS3(topology.net , Answer file) you should be fameliar with
.net file because when you download the files , maybe you need to change the image to the image that you have ( 10 $)
2- CCNP Examples which is include 9 files , each file include : PDF Example Scenario , Gns3 (Topology.net , Answe File ) (10 $)
3- CCNP CBT Nuggets (Route 50 $)( Switch 50 $)
Contact me on : hassanzuhair58@yahoo.com
@Ruhail Pakistan, the subnet mask is a /26 so it is 255.255.255.192 and if we want to get the wildcard mask you will subtract 255.255.255.192 from 255.255.255.255 you will get 0.0.0.63
Hope this helps
The range is 192.168.6.64 -192.168.6.127/26 so the network is access list is
access-list permit 192.168.6.64 0.0.0.63 (where 0.0.0.63 was gotten from the subtraction above.)
255.255.255.255 -
255.255.255.192
0. 0.0.63
this is the configuration for 62 clientsm but still not able to ping from host, please help, giving exam tomorrow.
Weaver#sh run
interface FastEthernet0/0
ip address 192.168.100.30 255.255.255.240
ip nat inside
duplex auto
speed auto
interface Serial0/0
ip address 192.0.2.113 255.255.255.0
encapsulation frame-relay
ip nat outside
!
ip nat pool mypool 198.18.32.65 198.18.32.70 netmask 255.255.255.248
ip nat inside source list 1 pool mypool overload
ip classless
!
!
access-list 1 permit 192.168.6.64 0.0.0.63
!
!
!
!
!
!
end
The easy way to pass CCNA is to study both old and new question two days before Exam. The lab VTP, ACCESS-LIST and EIGRP. Study all drag and drop very important because if you get the lab and all drag and drop you will be fine. 9tut.com the best!!
the wildmask is looking room when subnet mask 248
Fastethernet 0/0 ip address 192.168.100.30
Interface serial 0/0 ip address 192.0.2.113
Router > enable
Router # config terminal (double enter)
Router (config) # interface fast Ethernet 0/0
Router (config-if)# ip address 192.168.100.30 255.255.255.0
Router (config-if)# no shut
Router (config-if)# exit
Router (config)# interface serial 0/0
Router (config-if)# ip address 192.0.2.113 255.255.255.0
Router (config-if)# no shut
Router (config-if)# exit
Router (config)# ip nat pool mypool1 192.19.100.1 192.19.100.18 netmask 255.255.255.240
Router (config)# access list 1 permit host 192.168.100.16 0.0.0.20
Router (config)# ip nat inside source list pool mypool1 overload
Router (config)# interface fastethernet 0/0
Router (config-if)# ip nat inside
Router (config-if)# exit
Router (config)# interface serial 0/0
Router (config-if)# ip nat outside
Router (config-if)# end
Router # copy running startup config
The S0/0 is 192.0.2.113, can you actually assign 198.x.x.x for the outside local to use for the pool? Please help
I appreciate you taking to time to contirbute That’s very helpful.
HI I am Manna Salwa from Bangladesh, I am thinking to sit CCNA exam July-2013. so if any one have CCNA current dump. please send me to the below address manna.dmcsl@yahoo.com and it will be great help if any one send me.
Thanks
Manna Salwa
CCNA NAT SIM Question 2. I can’t ping 192.0.2.114 PC2 .
Ok, I’m kinda confused here. How can follow instructions by using this tutorial file when it’s for NAT 1?? All IP’s are different from what it’s in this tutorial? Do I need to change all the IP to match to what’s on the picture?
And what is the purpose of this tutorial besides different IP addresses?
kidan what is your quation ,can you explain to us more my we can healp you ? dawit
HI, plz i don’t understand why did use PAT or not Dyanamic NAT? because you have six Public IP addresses
Kindly
I did the whole configuration on my given packet traer but it is not working as promised to be.
Weaver(config)#ip nat pool mypool 192.0.2.113 192.0.2.114 netmask 255.255.255.252
Weaver(config)#access-list 2 permit 192.168.100.17 0.0.0.13
Weaver(config)#ip nat ?
inside Inside address translation
outside Outside address translation
pool Define pool of addresses
Weaver(config)#ip nat inside ?
source Source address translation
Weaver(config)#ip nat inside source ?
list Specify access list describing local addresses
static Specify static local->global mapping
Weaver(config)#ip nat inside source list ?
Access list number for local addresses
WORD Access list name for local addresses
Weaver(config)#ip nat inside source list 2 ?
interface Specify interface for global address
pool Name pool of global addresses
Weaver(config)#ip nat inside source list 2 mypool ?
% Unrecognized command
Weaver(config)#ip nat inside source list 2 mypool ?
% Unrecognized command
Weaver(config)#ip nat inside source list 2 mypool
^
% Invalid input detected at ‘^’ marker.
Weaver(config)#ip nat inside source list 2 pool ?
WORD Name pool of global addresses
Weaver(config)#ip nat inside source list 2 pool mypool overload
Weaver(config)#int fa0/0
Weaver(config-if)#ip nat inside
Weaver(config-if)#exit
Weaver(config)#int s0/0
Weaver(config-if)#ip nat outside
Weaver(config-if)#exit
Weaver(config)#exit
I did these configurations and copied in runnng-config into startup-config
pinged packets through Host1 it is showing successful ping status for 192.0.2.113/114 but from Testing PC it shows that ping status for 192.0.2.114 is not successful while the other one is successful.
Need suggestion why?accepting this way.
The access-list statement should have a wildcard of 0.0.0.127. The question stated that we have 62 clients that need access to the internet. The current ACL only allows 60 clients access to the internet. The network id and broadcast cannot be assigned to a “client”
The NAT SIM Question 2 has the first packet tracer lab has NAT SIM Question 1.. can you fix it? The public ip address are different from the diagram.
I will wait for an answer ty.
@jay
acl statement is correct because 62 host needs access.
/26 – 32
/26 – 64
the network address is 192.168.1.64
determine the number of host
64-2 = 62 host available
Hi, this access-list: NAT SIM 2 isn’t working for me either. Here’s my config….Could this be an issue with the simulator?
I am able to PING up to 192.0.2.113 but not the (.114) host…..Any ideas?
interface FastEthernet0/0
ip address 192.168.100.30 255.255.255.240
ip nat inside
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Serial0/0
ip address 192.0.2.113 255.255.255.0
encapsulation frame-relay
ip nat outside
!
ip nat pool mypool 198.18.32.65 198.18.32.70 netmask 255.255.255.248
ip nat inside source list 1 pool mypool overload
ip classless
!
!
access-list 1 permit 192.168.6.64 0.0.0.63
!
!
!
!
!
It doesn’t have ping !!!!!!!!
What is the correct configuration?
This sim doesnt work correctly
it has to be reviewed
Instead of using ip nat inside source list 1 pool mypool overload, try ip nat inside source list 1 interface s0/0 overload [syntax - ip nat inside source list access-list-number interface interface overload]… Its works well for me…
@9tut, I would like to find out, what if we create this pool for public addresses:
config(#)ip nat pool mypool 198.18.32.65 198.18.32.65 netmask 255.255.255.248
Since we are using PAT, and we only have 62 hosts in this scenario, don’t you think this is enough to get everyone on the Internet at the same time?
I’ve read some writings that say that this configuration used here is mostly found in a network with literally ten thousand hosts, where a port conflict can occur, and using this kind of configuration is only a waste, what do you say about it? Please comment to help me in this, thanks
@9tut, are you there, just waiting for your comments about the previous post?
@Bill_Ado: Since you are using PAT then it is enough to get everyone on the Internet at the same time, even there is only 1 IP address in the pool because PAT provides over 64,000 ports for hosts to go to the Internet.
Please read more information about PAT here:
http://www.cisco.com/en/US/docs/security/asa/asa82/configuration/guide/nat_dynamic.html
@9tut: thanks for your feedback mate, It helps me add more on what i had, good job, keep it up
Hello between Lab 1 and Lab 2 is the difference just the ACL right?
Nat Lab 1
access-list 1 permit 192.168.100.16 0.0.0.15
Nat Lab 2
access-list 1 permit 192.168.6.64 0.0.0.63
is that correct?
thank you!
on this sim you need to configure the DG on the switch and the Management address on the switch, otherwise you won´t be able to ping… some labs here in 9tut aren´t fully configured, if you solve it by yourself this means you’re good to go. if you just rely on this labs if the situation change in the real exam you probably get cramed, and it’ll cost you precious time and points, the other lab that isn’t fully configured is NAT1
Hi folks
i M GOING TO TAKE MY CCNA 640-802 THIS WEEK I NEED AN UPDATED DUMPS IF ANYONE HAS IT
PLEASE SEND TO MY E-MAIL ADDRESS mustafaqasimi09@gmail.com thanks.
Want to become a CCNA trainer in Bangalore, India with a good salary; contact sumukhashruthi@gmail.com
the purpose of 0.0.0.63 in the ACL list is given a netmask as a wild mask, and the purpose of the hole ACL1 is given the permissionto hosts to get into the nat pool, and translate its ip add as a public ip add, thats why the 2nd nat configuraton command is ” ip nat inside source lis1 pool xxxxx overload.
For any who converted NAT sim1 to NAT sim2, if you’re having trouble getting the pings to work- you must remember to add a static route in the ISP router. you can do it from the config tab.
destination ip/mask 198.18.32.64 / 255.255.255.248
next hop 192.0.2.113
otherwise the isp router’s echo-reply has no way to reach your pc
the sim is not working… it was showing error as the pool so small for the no of hosts