PAT - absentee-neptune/NET-330 GitHub Wiki

💡 This information is from a network with two routers within Cisco CLI

  • Have to first configure the interfaces on the routers within the network with the appropriate information
  • On Router 1 set the Default Route (or Gateway of Last Resort) to Router 2
    • ip route 0.0.0.0 0.0.0.0 R2-Outside-IP
  • Configure PAT on Router 1
    • Define the 'inside' NAT interface, the interface with the private IP Address
      • interface ...
      • ip nat inside
      • exit
    • Define the 'outside' NAT interface, the interface with the public IP Address
      • interface ...
      • ip nat outside
      • exit
    • Create Address Pool for the Public IP addresses that Private IP clients can use, it only has 1 IP in the pool
      • ip nat pool NAME PRIVATE-IP PRIVATE-IP netmask NETMASK
    • Create an access-list that defines which internal Private IP's can use the Public IP pool test
      • access-list 1 permit PRIVATE-IP-RANGE NETMASK-RANGE
    • Assign pool and access-list rule to NAT inside interface with NAT statement
      • ip nat inside source list ACCESS-LIST pool NAT-POOL overload
  • Use the following command to how TCP ports are used to track connections in the NAT Table on Router 1
    • show ip nat translations