09.12.2012 Views

Understanding the network.pdf - Back to Home

Understanding the network.pdf - Back to Home

Understanding the network.pdf - Back to Home

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

This approach allows <strong>the</strong> administra<strong>to</strong>r <strong>to</strong> define NAT translation service on a<br />

host-by-host or <strong>network</strong>-wide basis. If all local <strong>network</strong>s are eligible, <strong>the</strong> "any any"<br />

ACL can be used. When <strong>the</strong> list is created,<br />

dynamic translation is enabled using <strong>the</strong> command, referring <strong>to</strong> <strong>the</strong> ACL number and outside address pool<br />

name. This example utilizes <strong>the</strong> translation pool we created in <strong>the</strong> previous section:<br />

sartre(config)#ip access-list 4 permit any any<br />

sartre(config)#ip nat inside source list 4 pool sartre-NAT overload<br />

Due <strong>to</strong> <strong>the</strong> small outside address pool, overload is enabled for more efficient use of<br />

<strong>the</strong> translation address pool.<br />

NAT Interface Specification<br />

When <strong>the</strong> source translation eligibility and outside address pool list definitions are<br />

completed, <strong>the</strong> inside and outside NAT translation interfaces must be defined.<br />

Interfaces are defined with <strong>the</strong> interface configuration subcommand and :<br />

sartre(config)# interface s0<br />

sartre(config-int)#ip address 12.14.116.5 255.255.255.252<br />

sartre(config-int)# ip nat outside<br />

sartre(config-int)#exit<br />

sartre(config)# interface e0<br />

sartre(config-int)#ip address 192.168.1.1 255.255.255.0<br />

sartre(config-int)# ip nat inside<br />

sartre(config-int)#exit<br />

When both interfaces are configured, NAT is up and running. To see NAT translation<br />

table and operational statistics, <strong>the</strong> user EXEC commands and are available. To clear NAT<br />

translations, you can use <strong>the</strong> privileged EXEC command .

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!