Datasheet

ManualsBrandsCisco ManualsComputer equipment1701-K9-RF - 1701 ADSL Security Access Router

171

172

173

174

175

176

177

178

179

180

Lab - Troubleshooting NAT Configurations

Part 3: Troubleshoot Dynamic NAT

a. From PC-B, ping Lo0 on the ISP router. Do any NAT debug translations appear on the Gateway router?

________________ No

b. On the Gateway router, enter the command that allows you to view the current configuration of the router.

Are there any problems with the current configuration that prevent dynamic NAT from occurring?

____________________________________________________________________________________

Yes. The NAT pool is incorrectly identified in the source statement. The NAT access list has an incorrect

network statement.

c. Record any commands that are necessary to correct the dynamic NAT configuration errors.

____________________________________________________________________________________

Gateway(config)# no ip nat inside source list NAT_ACL pool NATPOOL

Gateway(config)# ip nat inside source list NAT_ACL pool NAT_POOL

Gateway(config)# ip access-list standard NAT_ACL

Gateway(config-std-nacl)# no permit 192.168.10.0 0.0.0.255

Gateway(config-std-nacl)# permit 192.168.1.0 0.0.0.255

d. From PC-B, ping Lo0 on the ISP router. Do any NAT debug translations appear on the Gateway router?

____________________________________________________________________________________

Yes

*Mar 19 00:01:17.303: NAT*: s=192.168.1.4->209.165.200.241, d=198.133.219.1 [198]

*Mar 19 00:01:17.315: NAT*: s=198.133.219.1, d=209.165.200.241->192.168.1.4 [198]

Gateway#

*Mar 19 00:01:18.307: NAT*: s=192.168.1.4->209.165.200.241, d=198.133.219.1 [199]

*Mar 19 00:01:18.315: NAT*: s=198.133.219.1, d=209.165.200.241->192.168.1.4 [199]

*Mar 19 00:01:19.303: NAT*: s=192.168.1.4->209.165.200.241, d=198.133.219.1 [200]

Gateway#

*Mar 19 00:01:19.315: NAT*: s=198.133.219.1, d=209.165.200.241->192.168.1.4 [200]

*Mar 19 00:01:20.303: NAT*: s=192.168.1.4->209.165.200.241, d=198.133.219.1 [201]

*Mar 19 00:01:20.311: NAT*: s=198.133.219.1, d=209.165.200.241->192.168.1.4 [201]

e. Use the show ip nat statistics to view NAT usage.

Gateway# show ip nat statistics

Total active translations: 2 (1 static, 1 dynamic; 0 extended)

Peak translations: 3, occurred 00:02:58 ago

Outside interfaces:

Serial0/0/1

Inside interfaces:

GigabitEthernet0/1

Hits: 24 Misses: 0

CEF Translated packets: 24, CEF Punted packets: 0

Expired translations: 3

Dynamic mappings:

-- Inside Source