topic Re: NAT and PAT configuration in Network Security

NAT and PAT configuration

catalystextremiste — Mon, 27 Sep 2021 11:09:56 GMT

HELLO GUYS,

I'm trying to configure NAT on the LAN1 and PAT on the LAN2

can someone tell me what to add as a config to the router BB-K so i can ping from HTTP2 to HTTP1

D.CENTER :

interface fa0/1

ip nat inside

ip nat inside source static 172.16.50.1 193.95.75.3

ip nat inside source static 172.16.50.2 193.95.75.4

ip nat inside source static 172.16.50.3 193.95.75.5

interface serial 0/0/0

ip nat outside

BB-S :

interface fa0/1

ip nat inside

interface serial 0/1/0

ip nat outside

access-list 7 permit 172.16.50.0 0.0.0.255

ip nat pool P1 193.95.76.3 193.95.76.6 netmask 255.255.255.248

ip nat inside source list 7 pool P1 overload

BB-K :

interface serial 0/0/0

ip nat outside

interface serial 0/1/0

ip nat outside

Re: NAT and PAT configuration

catalystextremiste — Mon, 27 Sep 2021 20:34:22 GMT

any help GUYS???

Re: NAT and PAT configuration

Martin L — Mon, 27 Sep 2021 20:48:37 GMT

Please attach pt file in a zip format for easier and faster answer.

Re: NAT and PAT configuration

catalystextremiste — Mon, 27 Sep 2021 20:53:01 GMT

Re: NAT and PAT configuration

Martin L — Tue, 28 Sep 2021 03:21:34 GMT

First of all, assuming that K router is ISP router, we need to remove nat configs from K router and add static routes on edge routers. there is also a duplicate IP address on serial interfaces. To make this NAT lab to work, we need NAT static entry on BB-S similarly what you have on DC router. Since you have same Private range on left and right sides, we need to hide those behind Nat. you can add on S router following entry: ip nat inside source static 172.16.50.20 193.95.76.20.

you can test it using BB-K, an ISP router by pining Public IPs like 193.95.75.3 or 193.95.75.5 or newly added entry 193.95.76.20. You cannot reach Private range from Internet, so you cannot ping any 172.16.50.x.

Normally and technically, to reach private web server from the Internet, routers will have static TCP NAT entries translating port 80 of Private IP to Public IP port 80. Example on BB-S has ip nat inside source static tcp 172.16.50.20 80 193.95.76.20 80

Regards, ML
**Please Rate All Helpful Responses **