NAT Flashcards
(33 cards)
Clear all dynamic NAT translation entries:
R1# […]
clear ip nat translation *
Show the NAT statistics:
R1# […]
show ip nat statistics
Show the NAT translation table:
R1# […]
show ip nat translations
When only source NAT is used, in the output of show ip nat translations you can expect the […] and […] addresses to be the same.
outside local / outside global
Configure a static source NAT mapping:
R1(config)# […]
ip nat inside source static inside-local-ip inside-global-ip
Configure the NAT outside interface:
R1(config-if)# […]
ip nat outside
Configure the NAT inside interface:
R1(config-if)# […]
ip nat inside
Cisco NAT terminology:
[…] = The IP address of the outside host from the perspective of the outside network.
Outside Global
Cisco NAT terminology:
[…] = The IP address of the outside host from the perspective of the inside network.
Outside Local
Cisco NAT terminology:
[…] = The IP address of the inside host from the perspective of the outside network.
Inside Global
Cisco NAT terminology:
[…] = The IP address of the inside host from the perspective of the inside network.
Inside Local
Static Source NAT = […] address is mapped to […] address.
Inside Local / Inside Global
[…] NAT involves statically configuring one-to-one IP address mappings.
Static
What does NAT stand for?
Network Address Translation
Can private IPv4 addresses be used over the Internet?
No
What is the class C range of private IPv4 addresses?
192.168.0.0/16
What is the class B range of private IPv4 addresses?
172.16.0.0/12
What is the class A range of private IPv4 addresses?
10.0.0.0/8
Private IPv4 addresses are defined in RFC […].
1918
In which form of NAT are multiple inside local addresses translated to a single inside global address at the same time?
PAT / NAT Overload
In which form of NAT does the router automatically create one-to-one IP address mappings?
Dynamic NAT
When an ACL is used to identify traffic in dynamic NAT/PAT, what happens to traffic denied by the ACL?
It is not translated by the router
(but the traffic is not dropped!)
When an ACL is used to identify traffic in dynamic NAT/PAT, what happens to traffic permitted by the ACL?
It is translated by the router
What does a router do if a packet requires NAT but no inside global addresses are available?
It drops the packet