1682_ch10.
qxd 7/14/06 11:48 AM Page 51
Lab 10
NAT Overload (PAT)
This CCNA Video Mentor (CVM) lab shows how to configure Network Address Translation (NAT),
specifically using the Port Address Translation (PAT) or overload feature. In particular, the objectives
of this lab are as follows:
■ Define the following NAT terms:
– Inside, Outside, Inside Local, and Inside Global
■ Describe how NAT changes the following:
– IP addresses for Enterprise (Inside) hosts for a typical Internet connection
– Port numbers to support thousands of connections using a single Inside Global IP address
■ Configure NAT overload (PAT) using a single interface IP address for the Inside Global IP
address
Scenario
This lab contains two main steps, as follows:
Step 1. Review the terms associated with the typical use of NAT and PAT with an Internet
connection and see NAT working in a router.
Step 1. Review router NAT/PAT configuration using a single IP address on an interface
(no NAT pool).
Initial Configurations
Example 10-1 shows the pertinent initial configuration of router R1 in the lab video. Note that this lab
begins with R1 having a valid NAT/PAT overload configuration, using the Inside Global IP address of
R1’s S0/1/0 interface ([Link]). As usual, the parts of the configurations not relevant to this lab have
been omitted.
Example 10-1 Initial Configuration for R1
hostname R1
!
ip nat inside source list 3 interface serial 0/1/0 overload
!
interface FastEthernet 0/0
ip address [Link] [Link]
ip nat inside
!
1682_ch10.qxd 7/14/06 11:48 AM Page 52
52 CCNA Video Mentor
Example 10-1 Initial Configuration for R1 continued
interface Serial 0/1/0
ip address [Link] [Link]
ip nat outside
!
access-list 3 permit [Link] [Link]
Ending Configurations
This lab video does not change the router configuration.
Video Presentation Reference
This video presents several figures that describe how NAT overload (PAT) works generally and
how it works in the particular example shown in the lab video. This section simply lists these
figures for reference.
Figure 10-1 shows a diagram of the network used in this example.
Figure 10-1 Lab 10 Scenario Topology
The
[Link]
Internet
PC1
Fa0/0 S0/1/0
S0/1/0
[Link]
[Link] R1 [Link] ISP-1
PC2
[Link]
Web Server
Private Network
[Link]
[Link]
Because the video is organized into two separate steps, the reference materials have been organ-
ized into two separate sections.
1682_ch10.qxd 7/14/06 11:48 AM Page 53
Lab 10: NAT Overload (PAT) 53
Step 1 Reference
Figure 10-2 Concept of Inside and Outside with NAT
Inside– Outside–
“My Network” “The Rest of
the World”
S0/1/0
[Link]
R1
Packet Source Address: Packet Source Address:
172.22.x.y – Inside Locals Changed to [Link]
Figure 10-3 How NAT Overload Changes Inside Addresses and Ports
[Link]
PC1
Fa0/0 S0/1/0
S0/1/0
[Link]
[Link] R1 [Link] ISP-1
Web Server
PC2
NAT Table [Link]
Inside Local Inside Global
[Link] : 3212 [Link] : 3212
[Link]
[Link] : 3212 [Link] : 3213
Private Network The
[Link] Internet
First Connection
Dest. Source: Dest. Port: Source Port: Dest. Source: Dest. Port: Source Port:
[Link] [Link] 80 3212 [Link] [Link] 80 3212
NAT Makes This Change
Second Connection
Dest. Source: Dest. Port: Source Port: Dest. Source: Dest. Port: Source Port:
[Link] [Link] 80 3212 [Link] [Link] 80 3213
NAT Makes This Change
And This One, Too
1682_ch10.qxd 7/14/06 11:48 AM Page 54
54 CCNA Video Mentor
Figure 10-4 Three TCP Connections Created to Test NAT Overload
Source IP [Link], Source Port 15916
[Link]
Source IP [Link], Source Port 35203
PC1
R1
Web Server
PC2
[Link]
Source IP [Link], Source Port 13109
[Link]
Step 2 Reference
Figure 10-5 Configuring Inside and Outside Interfaces
Inside– Outside–
“My Network” “The Rest of
the World”
Fa0/0 S0/1/0
[Link] [Link]
R1
Interface Fa0/0 Interface S0/1/0
ip nat inside ip nat outside
Figure 10-6 Configuring NAT Overload Using an Interface as Inside Global
NAT Source
Addresses
ip nat inside source list ACL-number interface type-and-number overload
NAT Packets Source Addresses Use This Interface’s Do Overload
Entering an That Should Be IP Address as Inside (PAT)
Inside Interface NAT’ed Global IP Address