📌 1. What is NAT?
NAT allows a device (like a router or firewall) to translate one IP address into another.
🚧 Mostly used to translate private IPs into public IPs to enable internet access.
🧠 Why?
Because private IPs aren’t routable on the internet.
Your PC at [Link] tries to reach Google? The router translates it into a public IP,
sends it out, and remembers who made the request.
🏠 2. Real World Analogy
NAT is like a receptionist at an office.
You call them, they forward the call, and when someone replies, they send it back
to you.
🔥 3. Types of NAT (CCNA-Level)
Type Description
Static NAT 1-to-1 mapping between private & public
IP
Dynamic NAT Uses a pool of public IPs, assigns one
temporarily
PAT (Port Address Many-to-one mapping using ports (aka
Translation) NAT overload)
PAT is by far the most common — what homes and businesses use.
🧠 4. NAT Table
The router keeps a translation table:
I I P
n n o
s si r
i d t
d e
e G
L l
o o
c b
a al
l
1 2 5
9 0 4
2 3. 3
. 0. 2
1 1 1
6 1
8 3.
. 5
1
.
1
0
1 2 5
9 0 4
2 3. 3
. 0. 2
1 1 2
6 1
8
.
1 3.
. 5
1
1
Local = private, Global = public
📦 5. Inside vs Outside
Dir Description
ect
ion
Ins Private IP of
ide internal host
Lo
cal
Ins Public IP seen on
ide the internet
Glo
bal
Ou Usually not used
tsi (rare cases)
de
Lo
cal
Ou Real public IP of
tsi external host
de
Glo
bal
✅
CCNA might ask "Which address is translated in PAT?"
Answer: Inside Local → Inside Global
⚙️ 6. Static NAT Configuration (CLI)
bash
CopyEdit
ip nat inside source static [Link] [Link]
interface g0/0
ip nat inside
interface g0/1
ip nat outside
Always define which interfaces are inside and outside NAT.
🔄 7. Dynamic NAT Configuration
bash
CopyEdit
ip nat pool MYPOOL [Link] [Link] netmask
[Link]
ip nat inside source list 1 pool MYPOOL
access-list 1 permit [Link] [Link]
interface g0/0
ip nat inside
interface g0/1
ip nat outside
⚡ 8. PAT (NAT Overload) Configuration
bash
CopyEdit
ip nat inside source list 1 interface g0/1 overload
access-list 1 permit [Link] [Link]
NAT overload means all internal devices share the same public IP — using
ports to distinguish sessions.
🔍 9. Show & Debug Commands
Command W
ha
t it
sh
o
w
s
show ip N
nat AT
translatio ta
bl
ns
e
show ip N
nat AT
statistics st
at
s
debug ip Li
nat ve
N
AT
lo
gs
🔥 10. CCNA NAT Scenario Traps
✅ Which IP is “Inside Local”? = Private source
✅ Which IP is "Inside Global"? = What the world sees
✅ PAT = overload using ports
✅ Static NAT = 1:1
✅ Dynamic NAT = pool
✅ PAT = 1 public IP, multiple private hosts
✅ Troubleshooting NAT? Check access lists + interface roles
🧠 11. NAT vs No NAT
Without NAT With NAT
Private IPs can’t Private IPs
access internet can go
public
No IP translation Full IP
translation
Must use real IPs Saves
public IP
space