In this lab.
You need to configure static nat to make the network work.
Okay.
So we've been told to configure static nat.
The first thing we need to do is configure the router.
So I'm going to open up a console to the router.
And the first thing I'll do is configure a hostname of rather one that's not in the list of requirements,
but I think it's worthwhile doing that in labs in the exam.
Do what they tell you to do.
So just follow the steps in the exam and make sure that you complete what's required in these labs.
We can do a bit extra based on best practices, so it's a good idea to configure your device names.
Interface Gigabyte 001 is connected to the Internet.
It's going to be configured with this IP address and I'll know shutter the interface.
So the routers outside interfaces being configured going to the inside interface.
No, shut it.
I'll give it an IP address of ten 1125 for per the lab diagram.
So verification show IP interface brief.
In the output.
We can see that this IP address is configured on gigabit 000, which is correct.
And this IP address is configured on the outside interface, which is correct.
Both interfaces are up, which is good.
Now that packet tracer has shown us that the links are green.
We can ping the DNS server and that works.
So we've tested connectivity on the outside interface.
Let's test connectivity to one of the servers.
So the HTTP server has IP address ten one one 100.
So can we ping ten one one 100?
And the answer is yes.
So we've configured our IP addresses per the instructions.
We need to configure a default route to the Internet.
So IP wrote 0000.
With the same mosque pointing to the DNS server.
So show IP route, that's what our routing table looks like.
Now in the real world, your ISP will specify which default gateway to use.
For this lab, I'm simply pointing it to the DNS server, but typically you would point it to a router
in the internet and often like at home, the service provider router will allocate you an IP address
through DHCP as well as allocate you a default gateway.
The device that your home router connects to depends and can vary depending on what access technology
you're using.
But in this example, we're using Ethernet and I'm simply going to point the default gateway to the
DNS server.
So now we need to configure static NAT so that the outside PC can access the internal servers.
So connected IP.
Nat, we are netting inside devices, we are netting the source IP addresses and we are doing a static
NAT translation.
In this example, we've been told to net only the required port.
So what protocol does http use?
Uses TCP when doing a net?
Translations like this you always specify the physical device IP address first.
So that is the IP address on the server.
Next thing we need to configure is the port number.
What port number does http use?
It uses port ID inside global IP address.
So what is the IP address that the server will use on the internet?
It's 82.8.82 200.
So 82.82. 200 port number is 80.
So we've configured the server for HTTP.
The lab doesn't specify https, but if your instructions were to configure https, you would also specify
port four, four, three.
That's the port number for SSL or HTTPS.
I'm going to add that here just to demonstrate that it's possible, but that's not required for this
lab.
Next step is to configure FTP.
Now we told here to use a full static and nat translation.
So IP Nat inside source static.
And here we're going to specify the IP address of the FTP server.
Which is ten 11101.
And then we're going to specify the external or netted IP address, which is called the inside a global
IP address.
And then we press enter.
So notice the difference for the HTTP server.
We specified individual port numbers for the FTP server.
We did a full and native translation.
Any traffic going to this IP address and any port number will be translated to this IP address.
Traffic going to this IP address and port number will be netted to this IP address.
But if traffic arrives going to 8.8.8 200 and port number 23, that traffic will be dropped.
This is a more secure way of doing that because you're only netting specific IP addresses.
In addition, it allows you to use the same global IP address and net it to different servers on the
inside network.
So this tends to be the way people do it in the real world.
So IP Nat translation at the moment we can see our static net translations.
Let's verify a configuration.
So show run.
One step that we still need to do is configure inside and outside interfaces.
So this interface interface gigabyte 000 needs to be the inside interface.
So IP Nat inside and gigabit is 001 needs to be the outside interface.
So show IP Nat translation there are our NAT translations once again and Show Run allows us to verify
that we've configured both the inside and outside NAT interfaces.
So now let's verify if the outside PC can access the internal servers.