NAT Lab Guide
1 NAT Lab Guide
1.1 Lab Introduction
1.1.1 Background
A company has built the infrastructure network and Intranet users need to access the
Internet. The company has requested 15 public IP addresses ranging from [Link] to
[Link] from an operator. When Intranet users access the Internet, the source addresses
need to be translated into the 15 addresses. The intranet has one server to provide services
externally. It is required that Internet users access the Intranet server through the IP address of
the external port of Router-NAT.
As the network administrator of the company, you need to utilize the network address
translation (NAT) technology to meet the requirements.
1.1.2 Lab Purpose
(1) Master the application scenarios of dynamic NAT and static source address translation
technologies.
(2) Master the configuration commands and status check commands of dynamic NAT and static
source address translation technologies.
1.1.3 Lab Topology
Figure 1-1 Topology of the NAT Lab
1.1.4 Lab Requirements
(1) The IP addresses of PC1 and PC2 are [Link]/24 and [Link]/24 respectively, and
they belong to VLAN 10 and VLAN 20 respectively. The gateway is located in LAN-SW1. The
IP address of the server is [Link]/24 (port 23 provides services externally) and it
belongs to VLAN 30.
(2) The addresses for interconnecting Router-NAT and ISP-R1 are [Link]/30 and [Link]/30
respectively. The addresses for interconnecting LAN-SW1 and Router-NAT are [Link]/30
and [Link]/30 respectively. ISP-User is the client of the Internet server and Client is the
user client for accessing the LAN server. Their addresses are [Link]/24 and [Link]/24
respectively. Both gateways are located in ISP-R1.
(3) PC1, PC2, and Server can access the Internet (that is, ISP-User).
(4) Client can access port 23 of Server through the Internet.
1
NAT Lab Guide
1.1.5 Configuration Ideas
(1) Complete basic configurations: Configure interconnection addresses for devices, configure
IP addresses for PCs, Server, and Client.
(2) Complete basic route configurations.
(3) Configure dynamic NAT and static source address translation.
1.1.6 Procedure
(1) Configure IP addresses and VLANs.
Configure VLANs:
LAN-SW1(config)#vlan 10
LAN-SW1(config-vlan)#add inter g0/0
LAN-SW1(config-vlan)#vlan 20
LAN-SW1(config-vlan)#add inter g0/1
LAN-SW1(config-vlan)#vlan 30
LAN-SW1(config-vlan)#add inter g0/2
Configure IP addresses:
PC1:
PC1> ip [Link] 24 [Link]
PC2:
PC2> ip [Link] 24 [Link]
Server (Router):
Server(config)#inter g0/0
Server(config-if-GigabitEthernet 0/0)#no swit
Server(config-if-GigabitEthernet 0/0)#ip add [Link] 24
LAN-SW1(config)#inter vlan 10
LAN-SW1(config-if-VLAN 10)#ip add [Link] 24
LAN-SW1(config-if-VLAN 10)#inter vlan 20
LAN-SW1(config-if-VLAN 20)# ip add [Link] 24
LAN-SW1(config-if-VLAN 20)#inter vlan 30
LAN-SW1(config-if-VLAN 30)#ip add [Link] 24
LAN-SW1(config)#inter g0/3
LAN-SW1(config-if-GigabitEthernet 0/3)#no swit
LAN-SW1(config-if-GigabitEthernet 0/3)#ip add [Link] 30
Router-NAT(config)#inter g0/0
Router-NAT(config-if-GigabitEthernet 0/0)#no swit
Router-NAT(config-if-GigabitEthernet 0/0)#ip add [Link] 30
Router-NAT(config-if-GigabitEthernet 0/0)#inter g0/1
Router-NAT(config-if-GigabitEthernet 0/1)#no swit
Router-NAT(config-if-GigabitEthernet 0/1)#ip add [Link] 30
ISP-R1(config)#inter g0/0
ISP-R1(config-if-GigabitEthernet 0/0)#no swit
ISP-R1(config-if-GigabitEthernet 0/0)#ip add [Link] 30
ISP-R1(config-if-GigabitEthernet 0/0)#inter g0/1
ISP-R1(config-if-GigabitEthernet 0/1)#no swit
ISP-R1(config-if-GigabitEthernet 0/1)#ip add [Link] 24
2
NAT Lab Guide
ISP-R1(config-if-GigabitEthernet 0/1)#inter g0/2
ISP-R1(config-if-GigabitEthernet 0/2)#no swit
ISP-R1(config-if-GigabitEthernet 0/2)#ip add [Link] 24
ISP-User> ip [Link] [Link] [Link]
Client(config)#inter g0/0
Client(config-if-GigabitEthernet 0/0)#no swit
Client(config-if-GigabitEthernet 0/0)#ip add [Link] 24
(2) Complete basic route configurations.
Server(config)#ip rou [Link] [Link] g0/0 [Link]
LAN-SW1(config)#ip route [Link] [Link] g0/3 [Link]
Router-NAT(config)#ip route [Link] [Link] g0/1 [Link]
Router-NAT(config)#ip route [Link] [Link] g0/0 [Link]
ISP-R1(config)#ip route [Link] [Link] g0/0 [Link] //This route is the
public network address requested by the company for accessing the Internet.
Client(config)#ip route [Link] [Link] [Link]
(3) Configure dynamic NAT.
Router-NAT(config)#ip access-list standard 1
Router-NAT(config-std-nacl)#permit [Link] [Link]
Router-NAT(config-std-nacl)#permit [Link] [Link]
Router-NAT(config-std-nacl)#permit [Link] [Link]
Router-NAT(config)#inter g0/0
Router-NAT(config)#ip nat inside
Router-NAT(config)#inter g0/1
Router-NAT(config)#ip nat outside
Router-NAT(config)#ip nat pool ruijie [Link] [Link] netmask [Link]
Router-NAT(config)#ip nat inside source list 1 pool ruijie overload
(4) Configure source address translation.
Router-NAT(config)# ip nat inside source static tcp [Link] 23 [Link] 23 permit-
inside
1.1.7 Result Verification
(1) Both Intranet PCs and Server can access the Internet. Check NAT entries on Router-NAT.
The source addresses are translated into addresses in the range of [Link]–[Link].
3
NAT Lab Guide
(2) Client accesses intranet Server through the IP address of the external network port of
Router-NAT.
Enable the telnet service on Server.
Server(config)#lin vty 0 4
Server(config-line)#password 1234567890
Server(config-line)#transport input telnet
4
NAT Lab Guide