cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
658
Views
0
Helpful
2
Replies

NAT using overoad

superunix
Level 1
Level 1

I need your help.

Please, help me!!

I know that many hosts can access to the internet using NAT with only a few public address.

The my task is to complete the NAT configuration using all IP addresses assigned by the ISP to provide Internet access to the hosts in the company LAN.

And, I am wondering whether use Overload keyword or not. Just, do I need overload?

And, may I use a few pulic addresses to use overload keyword?

I saw that overload use a single public address from Cisco book. is it right?

And, I don't know wildmask and subnet well.

Please, let me the configuration in details...

Boss requested me the NAT configuration, saying the following situations.

Maybe, I guess that he test me...

Please, help me!

If I have the following ip addresses,how can I configure NAT?

#1:

Router name: AAA

inside global addresses: 198.18.32.217 -192.18.32.222/29

inside local addresses: 192.168.57.33 - 192.168.57.62/27

Number of inside hosts: 30

My answer:

??? indicate that I don't know how to configure.

Assume NAT pool named net-62...

AAA#config t

AAA(config)#ip access-list 5 permit ??? (I don't know widmask and subnet well.. sorry.., please, let me know in details)

AAA(config)#ip nat pool net-62 ??? (192.168.57.33 192.168.57.62? netmask)

AAA(config)#ip nat inside source list 5 pool net-62 overload? (Should I use overload keyword?)

AAA(config)#int fa0/0

AAA(config-if)#ip add -missing-

AAA(config-if)#ip nat inside

AAA(config-if)#exit

AAA(config)#int s0/0

AAA(config-if)#ip address -missing-

AAA(config-if)#ip nat outside

AAA(config-if)#end

AAA#copy run start

Please, answer the configuration in details...

If possible, please, cound you answer the below questions, also?

-----------------------------------------------------------------------

#2:

Router name: BBB

inside global addresses: 198.18.169.121 198.18.169.126/29

inside local addresses: 192.168.2.33 – 192.168.2.62/27

Number of inside hosts: 30

What's the answer of 23?

-missing-

BBB(config)# ip access-list 5 permit ???

BBB(config)# ip nat pool POOLNAME ????

-missing-

-----------------------------------------------------------------------

#3:

Router name: CCC

inside global addresses: 198.18.175.25 198.18.175.30/29

inside local addresses: 192.168.77.65 – 192.168.77.94/27

Number of inside hosts: 30

What's the answer of #3?

-missing-

CCC(config)# ip access-list 5 permit ???

CCC(config)# ip nat pool POOLNAME ????

-missing-

-----------------------------------------------------------------------

#4:

Router name: DDD

inside global addresses: 198.18.202.97 198.18.202.102/29

inside local addresses: 192.168.15.129 – 192.168.5.190/26

Number of inside hosts: 62

What's the answer of #4?

-missing-

DDD(config)# ip access-list 5 permit ???

DDD(config)# ip nat pool POOLNAME ????

-missing-

#5:

Router name: EEE

inside global addresses: 192.18.186.25 192.18.186.30/29

inside local addresses: 192.168.16.129 192.168.16.190/27

Number of inside hosts: 62

What's the answer of #5?

-missing-

EEE(config)# ip access-list 5 permit ???

EEE(config)# ip nat pool POOLNAME ????

-missing-

2 Replies 2

stomasko
Level 4
Level 4

#1

access-list 5 permit 192.168.57.33 0.0.0.31

ip nat pool net-62 198.18.32.217 198.18.32.217 prefix 29

ip nat inside source list 5 pool net-62 overload

#2

access-list 5 permit 192.168.2.33 0.0.0.31

ip nat pool net-62 198.18.169.126 198.18.169.126 prefix 29

ip nat inside source list 5 pool net-62 overload

#3

access-list 5 permit 192.168.77.65 0.0.0.31

ip nat pool net-62 198.18.175.25 198.18.175.25 prefix 29

ip nat inside source list 5 pool net-62 overload

#4

access-list 5 permit 192.168.15.129 0.0.0.63

ip nat pool net-62 198.18.202.97 198.18.202.97 prefix 29

ip nat inside source list 5 pool net-62 overload

#5

access-list 5 permit 192.168.16.129 0.0.0.63

ip nat pool net-62 198.18.186.25 198.18.186.25 prefix 29

ip nat inside source list 5 pool net-62 overload

I would only use 1 address for PAT as it will handle about 65,000 translations. This was a long question so I hope I was able to help.

Good luck

Steve

Philip D'Ath
VIP Alumni
VIP Alumni

Try checking out this config wizard for Cisco 837's. The same basic premise holds true for you.

http://www.ifm.net.nz/cookbooks/configwizard.html