Network Address Translation

ADVERTISEMENT

N
A
T
ETWORK
DDRESS
RANSLATION
packetlife.net
Example Topology
Address Classification
An actual address assigned to
Inside Local
an inside host
An inside address seen from
Inside Global
the outside
An actual address assigned to
Outside Global
FastEthernet0
FastEthernet1
an outside host
10.0.0.1/16
174.143.212.1/22
An outside address seen from
NAT Inside
NAT Outside
Outside Local
the inside
NAT Boundary Configuration
Perspective
interface FastEthernet0
Local
Global
ip address 10.0.0.1 255.255.0.0
ip nat inside
Inside Local
Inside Global
Inside
!
interface FastEthernet1
ip address 174.143.212.1 255.255.252.0
Outside
Outside Local
Outside Global
ip nat outside
Static Source Translation
Terminology
NAT Pool
! One line per static translation
A pool of IP addresses to be used as inside
ip nat inside source static 10.0.0.19 192.0.2.1
global or outside local addresses in translations
ip nat inside source static 10.0.1.47 192.0.2.2
ip nat outside source static 174.143.212.133 10.0.0.47
Port Address Translation (PAT)
ip nat outside source static 174.143.213.240 10.0.2.181
An extension to NAT that translates information
at layer four and above, such as TCP and UDP
Dynamic Source Translation
port numbers; dynamic PAT configurations
include the overload keyword
! Create an access list to match inside local addresses
Extendable Translation
access-list 10 permit 10.0.0.0 0.0.255.255
The extendable keyword must be appended
!
when multiple overlapping static translations are
! Create NAT pool of inside global addresses
configured
ip nat pool MyPool 192.0.2.1 192.0.2.254 prefix-length 24
!
Special NAT Pool Types
! Combine them with a translation rule
ip nat inside source list 10 pool MyPool
Rotary Used for load balancing
!
Match-
Preserves the host portion of
! Dynamic translations can be combined with static entries
ip nat inside source static 10.0.0.42 192.0.2.42
Host
the address after translation
Port Address Translation (PAT)
Troubleshooting
show ip nat translations [verbose]
! Static layer four port translations
ip nat inside source static tcp 10.0.0.3 8080 192.0.2.1 80
show ip nat statistics
ip nat inside source static udp 10.0.0.14 53 192.0.2.2 53
ip nat outside source static tcp 174.143.212.4 23 10.0.0.8 23
clear ip nat translations
!
! Dynamic port translation with a pool
NAT Translations Tuning
ip nat inside source list 11 pool MyPool overload
!
ip nat translation tcp-timeout <seconds>
! Dynamic translation with interface overloading
ip nat translation udp-timeout <seconds>
ip nat inside source list 11 interface FastEthernet1 overload
ip nat translation max-entries <number>
Inside Destination Translation
! Create a rotary NAT pool
ip nat pool LoadBalServers 10.0.99.200 10.0.99.203 prefix-length 24 type rotary
!
! Enable load balancing across inside hosts for incoming traffic
ip nat inside destination list 12 pool LoadBalServers
by Jeremy Stretch
v1.0

ADVERTISEMENT

00 votes

Related Articles

Related forms

Related Categories

Parent category: Education
Go