Configuration Guide Configuring NAT
Unless otherwise noted, the interface connecting intranet should be configured as the NAT inside interface.
Configuring the NAT Outside Interface
Mandatory configuration.
Unless otherwise noted, the interface connecting extranet should be configured as the NAT outside interface.
Configuring Static Translation of Outside Source Address
Optional configuration.
Configure static translation of outside source address in global configuration mode when a small number of users in
the extranet need to access the intranet.
Configuring Dynamic Translation of Outside Source Address
Optional configuration.
Configure dynamic translation of outside source address in global configuration mode when a large number of users
in the extranet need to access the intranet.
Configuring an ACL
ACL configuration is mandatory when dynamic source address mapping is used.
Restrict the range of users requiring source address translation in the intranet.
Configuring a Static Route
Mandatory configuration.
Specify the network egress after inside destination address translation.
Verification
N/A
Commands
Configuring the NAT Inside Interface and the NAT Outside Interface
ip nat { inside | outside }
inside: inside interface
outside: outside interface
Interface configuration mode
NAT does not work on a data packet unless a route exists between the outside interface and the inside
interface and the data packet meets a certain rule. Therefore, at least one inside interface and one
outside interface need to be configured on the router.
Configuring Static Translation of Outside Source Address
ip nat outside source static global-address local-address