In this lab, you need to configure both static and dynamic net.
So we've been told to configure both static and dynamic NAT to get this network working.
I'm going to connect to the Cisco router.
And open up a console.
The first thing I'll do is configure the router with a hostname and then I'll go to the internet facing
interface and know shut the interface and configure the router with an IP address of 8.82.8. 100 slash
24 mask.
Go on to the inside interface and shut it.
Configure an IP address of ten 11254 slash 24 mosque.
So show IP interface brief.
The router has been configured with IP addresses.
The next step is to configure static NAT for the HTTP and FTP server.
The HTTP server has an IP address of ten one one 100.
A FTP server has an IP address of ten 11101.
So firstly, we need to configure the HTTP server using only the required port.
So IP nat inside source static.
I need to specify the transport, which is TCP IP address of ten one one 100.
The physical IP address and the port number, which is port 80.
And then we need to specify the external or public facing IP address and port number and then press
enter.
Now in a previous lab I configured https as well as http.
Here I'll only configure http because that's all we've been requested to do in the exam.
Read carefully so that you configure the network per the exam instructions.
So IP net inside source static.
In this example, we want to configure the FTP server, but we've been told to use full static net.
So I'm not going to configure a port number.
I'm simply going to configure the entire range of port numbers on the FTP server.
So show IP native translations.
Those are the translations that we've configured.
Show run interface gigabit 2000 packet trace unfortunately doesn't support that command.
So Show Run.
There's our inside interface.
We still need to configure IP Nat inside on that interface.
There's the outside interface.
So interface gigabit 001 IP, Nat outside interface gigabit 000 IP Nat inside.
So we've configured the inside Nat interface, the outside Nat interface and we've configured two static
NAT translations.
We then need to configure dynamic net.
So IP net inside source list.
In this example, I'll choose access list one to keep it simple interface that we're going to overload
is gigabyte 001.
Don't forget to do overloading.
We've got two PCs on the inside that need to be netted.
Create to the access list to access list one permit.
Any in this example.
So show IP nat translations.
We've got our two static nat translations.
We won't see the dynamic nature translations until the PC's sent traffic.
So on inside.
PC one can we open up a browser to Cisco dot com?
Let's look at the net translations.
There's been a DNS response.
It took it a while but notice they Cisco dot com.
Look at the net translations again.
What you can see now is there are the DNS net translations.
PC had to connect to the DNS server and here's the connection to the HTTP server.
So this host on the inside network has been translated to this IP address and it connected to the server
on Port 80.
We can do some proof of that by using NSA lookup cisco dot com.
Notice that's the IP address of Cisco.
We should be able to ping cisco dot com as well.
Notice that resolves.
And if we look at our net translations, you can see the ICMP messages here.
There are the DNS resolutions notice.
The protocol used is UDP.
Here are the TCP connections to the web server.
Let's check a connection to Facebook.com.
So Facebook.com we can connect to Facebook.com.
Show IP natural translations.
This is Facebook so we can see the net connection to Facebook.
We can also verify that by doing GNSS lookup.
Facebook.com.
And there's the IP address of Facebook.
So that looks like it's working well.
But to confirm, let's do something similar on the second PC.
This PC has an IP address of ten 11103.
At the moment, in our native translations, we don't see one or three in the inside local address list.
But if we open up a web browser to Cisco dot com.
The PC can connect to Cisco dot com.
And if you look at the net translations, notice there is a connection to Cisco Rcom.
There's the DNS translation.
Facebook.com.
We can connect to Facebook, show IP native translations.
Here's the translation to Facebook.
Once again, our DNS translation inside PC to connection to Facebook and to Cisco.
Here are the connections from PC one to various servers on the Internet.
So these two internal hosts can connect to servers on the Internet.
Can this outside PC connect to our internal servers?
I'll open up a web browser.
We'll connect to my HTTP dot com.
I can connect to the server and browse the website.
So now show IP net translations.
Notice we see net translations going to 8.8.8 200.
Being netted to ten one one 100 and to the source is 8.8. 820.
So this PC with this IP address, 888 20 is able to connect to the internal web server.
Let's open up an FTP.
So ftp my ftp dot com that connects successfully.
And if we look at the net translations.
Notice this entry 21 that's FTP.
So the client is connecting to the FTP server.
If I type DLR, we get a list of files on the FTP server and if we look at the translations again,
notice we now see this entry.
Previously we didn't have an entry from server ten 11101, we only had 21.
But here we have an additional entry for the passive FTP connection.
So that works.
I think we've successfully configured this network.
Last step is to save the of configuration.
We were able to get the internal hosts to connect to Internet servers.
We were able to get the outside host to connect to internal servers.
We've used a combination of both static and dynamic.
Nat So this is the configuration, this interface is the inside NAT interface, this interface is the
outside NAT interface.
This configuration is for static NAT to allow outside hosts to connect to these two servers.
This is the dynamic net configuration pointing to an access list so any internal hosts can connect to
the internet.
But notice for traffic to the servers they use the static NAT translations static NAT takes precedence
over dynamic NAT translations.
So how did you do?
Were you able to complete the lab?