Datasheet

ManualsBrandsCisco ManualsComputer equipment1701-K9-RF - 1701 ADSL Security Access Router

131

132

133

134

135

136

137

138

139

140

Lab – Configuring Dynamic and Static NAT

ISP(config)# username webuser privilege 15 secret webpass

b. Enable the HTTP server service on ISP.

ISP(config)# ip http server

c. Configure the HTTP service to use the local user database.

ISP(config)# ip http authentication local

Step 6: Configure static routing.

a. Create a static route from the ISP router to the Gateway router using the assigned public network address

range 209.165.200.224/27.

ISP(config)# ip route 209.165.200.224 255.255.255.224 209.165.201.18

b. Create a default route from the Gateway router to the ISP router.

Gateway(config)# ip route 0.0.0.0 0.0.0.0 209.165.201.17

Step 7: Save the running configuration to the startup configuration.

Step 8: Verify network connectivity.

a. From the PC hosts, ping the G0/1 interface on the Gateway router. Troubleshoot if the pings are

unsuccessful.

b. Display the routing tables on both routers to verify that the static routes are in the routing table and

configured correctly on both routers.

Part 2: Configure and Verify Static NAT

Static NAT uses a one-to-one mapping of local and global addresses, and these mappings remain constant.

Static NAT is particularly useful for web servers or devices that must have static addresses that are

accessible from the Internet.

Step 1: Configure a static mapping.

A static map is configured to tell the router to translate between the private inside server address

192.168.1.20 and the public address 209.165.200.225. This allows a user from the Internet to access PC-A.

PC-A is simulating a server or device with a constant address that can be accessed from the Internet.

Gateway(config)# ip nat inside source static 192.168.1.20 209.165.200.225

Step 2: Specify the interfaces.

Issue the ip nat inside and ip nat outside commands to the interfaces.

Gateway(config)# interface g0/1

Gateway(config-if)# ip nat inside

Gateway(config-if)# interface s0/0/1

Gateway(config-if)# ip nat outside

Step 3: Test the configuration.

a. Display the static NAT table by issuing the show ip nat translations command.

Gateway# show ip nat translations

Pro Inside global Inside local Outside local Outside global

--- 209.165.200.225 192.168.1.20 --- ---