Lab Objective:
The objective of this lab exercise is for you to learn and understand how to configure static NAT.
Lab Purpose:
NAT configuration is a fundamental skill. Static NAT provides a one-to-one translation between a private IP address (RFC 1918) and a public IP address. Static NAT is typically used to provide access to private inside hosts from outside hosts or networks. When static NAT is configured, outside hosts or networks connect to devices on the inside using a public or external IP address. This hides the private IP addresses of hosts on the inside. As a Cisco engineer, as well as in the Cisco CCNA exam, you will be expected to know how to configure static NAT.
Certification Level:
This lab is suitable for CCNA certification exam preparation
Lab Difficulty:
This lab has a difficulty rating of 8/10
Readiness Assessment:
When you are ready for your certification exam, you should complete this lab in no more than 10 minutes
Lab Topology:
Please use the following topology to complete this lab exercise:
Task 1:
Configure the hostnames on routers R1, R3 and Sw1 as illustrated in the topology.
Task 2:
Configure R1 S0/0 which is a DCE to provide a clock rate of 256Kbps to R3. Configure the IP addresses on the Serial interfaces of R1 and R3 as illustrated in the topology.
Task 3:
Configure VLAN 50 named NAT_VLAN on Sw1. Assign the FastEthernet0/2 interface on Sw1 to this VLAN. Also, configure Sw1 to allow Telnet access using a password of CISCO.
Task 4:
Configure interface VLAN 50 on Sw1 and assign it the IP address illustrated in the topology. The default gateway on Sw1 should be 10.2.2.2. Next, configure interface FastEthernet0/0 in R3 and assign it the IP address illustrated in the topology.
Task 5:
Test connectivity by pinging from R1 to R3 and pinging from R3 to Sw1. These should all be successful. However, since R1 does not know about the 10.2.2.0/27 subnet, Sw1 will not be able to ping R1. Verify this.
Task 6:
Configure R3 F0/0 as the inside NAT interface and S0/0 as the outside NAT interface. Next, create a static NAT statement on R3 mapping the inside address of 10.2.2.4 (Sw1 interface VLAN 50) to the outside address of 192.168.254.4.
Task 7:
Ping from Sw1 to R1 and verify that the ping is successful. Next, Telnet from R1 to 192.168.254.4 and verify that you connect to Sw1 via the NAT configured on R3.