Configuration Guide Configuring NAT
Commands
Configuring the NAT Inside Interface and the NAT Outside Interface
ip nat { inside | outside }
inside: inside interface
outside: outside interface
Interface configuration mode
NAT does not work on a data packet unless a route exists between the outside interface and the inside
interface and the data packet meets a certain rule. Therefore, at least one inside interface and one
outside interface need to be configured on the router.
Configuring Static NAT
ip nat inside source static local-address global-address [ permit-inside ] [ netmask mask ] [ match
interface ]
local-address: inside address
global-address: outside address
permit-inside: permits intranet users to access the local-ip host using global-ip.
netmask mask: network-segment-to-network-segment address
match interface: specifies the egress interface.
Global configuration mode
Configuring the Address Pool
ip nat pool address-pool start-address end-address { netmask mask | prefix-length prefix-length }
address-pool: name of the address pool
start-address: start IP address
end-address: end IP address
netmask mask: network mask of the addresses
prefix-length prefix-length: length of the network mask of the addresses
Global configuration mode
Configuring Dynamic NAT
ip nat inside source list access-list-number pool address-pool
access-list-number: ACL number
pool address-pool: name of the address pool
To Next Page
Loading...
