Task 1:
For reference information on configuring hostnames, please refer to:
Lab 35 Configuration and Verification Task 1
Task 2:
For reference information on configuring DCE clocking, please refer to:
Lab 57 Configuration and Verification Task 2
Lab 58 Configuration and Verification Task 2
For reference information on configuring IP interfaces, please refer to:
Lab 31 Configuration and Verification Task 3
Task 3:
Sw1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Sw1(config)#vlan 50
Sw1(config-vlan)#name NAT_VLAN
Sw1(config-vlan)#exit
Sw1(config)#int f0/2
Sw1(config-if)#switchport mode access
Sw1(config-if)#switchport access vlan 50
Sw1(config-if)#no shutdown
Sw1(config-if)#exit
Sw1(config)#line vty 0 15
Sw1(config-line)#password CISCO
Sw1(config-line)#login
Sw1(config-line)#end
Sw1#
Sw1#show vlan brief
| VLAN | Name | Status | Ports |
| —- | ——————————– | ——— | ——————————- |
| 1 | default | active | Fa0/1, Fa0/3, Fa0/4, Fa0/5 |
| Fa0/6, Fa0/7, Fa0/8, Fa0/9 | |||
| Fa0/10, Fa0/11, Fa0/12, Fa0/13 | |||
| Fa0/14, Fa0/15, Fa0/16, Fa0/17 | |||
| Fa0/18, Fa0/19, Fa0/20, Fa0/21 | |||
| Fa0/22, Fa0/23, Fa0/24, Gi0/1 | |||
| Gi0/2 | |||
| 50 | NAT_VLAN | active | Fa0/2 |
| 1002 | fddi-default | active | |
| 1003 | trcrf-default | active | |
| 1004 | fddinet-default | active | |
| 1005 | trbrf-default | active |
Task 4:
Sw1#conf t
Enter configuration commands, one per line. End with CNTL/Z.
Sw1(config)#int vlan 1
Sw1(config-if)#shutdown
Sw1(config-if)#exit
Sw1(config)#int vlan 50
Sw1(config-if)#no shutdown
Sw1(config-if)#ip address 10.2.2.4 255.255.255.224
Sw1(config-if)#exit
Sw1(config)#ip default-gateway 10.2.2.2
Sw1(config)#end
Sw1#
R2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R2(config)#int fa0/0
R2(config-if)#no shutdown
R2(config-if)#ip address 10.2.2.2 255.255.255.224
R2(config-if)#end
R2#
Task 5:
R1#ping 192.168.254.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.254.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms
R2#ping 192.168.254.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.254.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms
R2#ping 10.2.2.4
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.2.2.4, timeout is 2 seconds:
..!!!
Success rate is 60 percent (3/5), round-trip min/avg/max = 1/3/4 ms
Sw1#ping 10.2.2.2
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 10.2.2.2, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/8 ms
Sw1#ping 192.168.254.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.254.1, timeout is 2 seconds:
…..
Success rate is 0 percent (0/5)
Task 6:
R2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R2(config)#int fa0/0
R2(config-if)#ip nat inside
R2(config-if)#exit
R2(config)#int s0/0
R2(config-if)#ip nat outside
R2(config-if)#exit
R2(config)#ip access-list extended NAT-ACL
R2(config-ext-nacl)#remark ‘Permit The 10.2.2.0/27 Subnet To Be NATd’
R2(config-ext-nacl)#permit ip 10.2.2.0 0.0.0.31 any
R2(config-ext-nacl)#end
R2#
Task 7:
R2#conf t
Enter configuration commands, one per line. End with CNTL/Z.
R2(config)#ip nat pool Dynamic-NAT 192.168.254.3 192.168.254.6 prefix-length 29
R2(config)#^Z
R2#
Task 8:
R2#config t
Enter configuration commands, one per line. End with CNTL/Z.
R2(config)#ip nat inside source list NAT-ACL pool Dynamic-NAT
R2(config)#end
R2#
R2#show ip nat statistics
Total active translations: 0 (0 static, 0 dynamic; 0 extended)
Outside interfaces:
Serial0/0
Inside interfaces:
FastEthernet0/0
Hits: 53 Misses: 0
Expired translations: 0
Dynamic mappings:
— Inside Source
[Id: 1] access-list NAT-ACL pool Dynamic-NAT refcount 0pool Dynamic-NAT: netmask 255.255.255.248
start 192.168.254.3 end 192.168.254.6
type generic, total addresses 4, allocated 0 (0%), misses 0
Task 9:
Sw1#ping 192.168.254.1
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.254.1, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/6/8 ms
R2#ping 192.168.254.1 source fastethernet0/0
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 192.168.254.1, timeout is 2 seconds:
Packet sent with a source address of 10.2.2.2
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 4/4/4 ms
R2#show ip nat translations
Pro Inside global Inside local Outside local Outside global
— 192.168.254.3 10.2.2.4 — —
— 192.168.254.4 10.2.2.2 — —
R2#show ip nat statistics
Total active translations: 2 (0 static, 2 dynamic; 0 extended)
Outside interfaces:
Serial0/0
Inside interfaces:
FastEthernet0/0
Hits: 91 Misses: 2
Expired translations: 0
Dynamic mappings:
— Inside Source
[Id: 1] access-list NAT-ACL pool Dynamic-NAT refcount 2pool Dynamic-NAT: netmask 255.255.255.248
start 192.168.254.3 end 192.168.254.6
type generic, total addresses 4, allocated 2 (50%), misses 0
| NOTE: Now that we have dynamic NAT configured, and we have pinged R1 from the F0/0 interface of R2 as well as from Sw1, we can see two dynamic translations in the NAT table. The first is a translation of the inside address 10.2.2.4 to the outside address of 192.168.254.3, and the second is the translation of the inside address 10.2.2.2 to the outside address of 192.168.254.3. Because the NAT pool only have 4 total IP addresses allocated, we can see that ½ the pool is in use as specified in the line type generic, total addresses 4, allocated 2 (50%), misses 0. Pay attention to the information printed by this command and commit it to memory. |