Datasheet

Lab – Configuring Dynamic and Static NAT
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public. Page 2 of 15
In this lab, an ISP has allocated the public IP address space of 209.165.200.224/27 to a company. This
provides the company with 30 public IP addresses. The addresses, 209.165.200.225 to 209.165.200.241, are
for static allocation and 209.165.200.242 to 209.165.200.254 are for dynamic allocation. A static route is used
from the ISP to the gateway router, and a default route is used from the gateway to the ISP router. The ISP
connection to the Internet is simulated by a loopback address on the ISP router.
Note: The routers used with CCNA hands-on labs are Cisco 1941 Integrated Services Routers (ISRs) with
Cisco IOS Release 15.2(4)M3 (universalk9 image). The switches used are Cisco Catalyst 2960s with Cisco
IOS Release 15.0(2) (lanbasek9 image). Other routers, switches and Cisco IOS versions can be used.
Depending on the model and Cisco IOS version, the commands available and output produced might vary
from what is shown in the labs. Refer to the Router Interface Summary Table at the end of this lab for the
correct interface identifiers.
Note: Make sure that the routers and switch have been erased and have no startup configurations. If you are
unsure, contact your instructor.
Instructor Note: Refer to the Instructor Lab Manual for the procedures to initialize and reload devices.
Required Resources
 2 Routers (Cisco 1941 with Cisco IOS Release 15.2(4)M3 universal image or comparable)
 1 Switch (Cisco 2960 with Cisco IOS Release 15.0(2) lanbasek9 image or comparable)
 2 PCs (Windows 7, Vista, or XP with terminal emulation program, such as Tera Term)
 Console cables to configure the Cisco IOS devices via the console ports
 Ethernet and serial cables as shown in the topology
Part 1: Build the Network and Verify Connectivity
In Part 1, you will set up the network topology and configure basic settings, such as the interface IP
addresses, static routing, device access, and passwords.
Step 1: Cable the network as shown in the topology.
Attach the devices as shown in the topology diagram, and cable as necessary.
Step 2: Configure PC hosts.
Step 3: Initialize and reload the routers and switches as necessary.
Step 4: Configure basic settings for each router.
a. Disable DNS lookup.
b. Configure IP addresses for the routers as listed in the Addressing Table.
c. Set the clock rate to 128000 for the DCE serial interfaces.
d. Configure device name as shown in the topology.
e. Assign cisco as the console and vty passwords.
f. Assign class as the encrypted privileged EXEC mode password.
g. Configure logging synchronous to prevent console messages from interrupting the command entry.
Step 5: Create a simulated web server on ISP.
a. Create a local user named webuser with an encrypted password of webpass.