Question

Day 2 After we have basic connectivity and can ping everything, we will need to add some NAT configs. NAT out - with some PAT. You should be able to get out (via NAT) from only 33.33.33.33, so you will have to source your ping from that interface on R1. You also will need to make sure you see the traffic coming from R2 to R3. To see the ping traffic hitting R3, you'll need to turn on logging and debug ICMP. Logging con Debug Ip icmp (this really changes depending on OS) Things you're going to need -- just realize these are "ACLs" but they are how we classify IP addresses. Ip access-list standard NAT_Out permit host 33.33.33.33 deny any Here's for the outbound nat pool. These are the addresses you should see on R3 when you get the debugs. ip nat pool no-overload 10.0.1.5 10.0.1.7 netmask 255.255.255.0 ip nat inside source static........................ what else do you need here? What would it be called if you used the commands TCP/ UDP? How about we just use the IP on the interface? ip nat inside source list no-overload interface e1/0 What does the command overload do? You'll need to configure the NAT directions on the router under the interfaces. IP nat inside IP nat outside Static NAT from outside in. What are the IPs for the inside global and inside local addresses? Now NAT 10.0.1.9 in to 22.22.22.22. aka make 22.22.22.22 appear like 10.0.1.9 to the outside world ip nat inside source static.... Now show me the debugs from both the outside world and the inside router. What do you notice about the IP addresses? Where is this helpful? What groups of addresses would be best to be used internally? How can you check to see what kind of translations are going through R2? Actual report part and what you need to turn in: 1) Config snippets. The ACLs, the NAT commands, and the interfaces. 2) You'll also need to send a snippet of the logs. This will include the "show ip nat trans" and the debugs. The debugs should look something like this: ICMP: echo reply sent, src 10.0.1.2, dst 10.0.1.1, topology BASE, dscp 0 topoid 0 3) Answers to my questions. In a nice written format.

Day 2
After we have basic connectivity and can ping everything, we will need to add some NAT configs.
NAT out - with some PAT.
You should be able to get out (via NAT) from only 33.33.33.33, so you will have to source your ping from that interface on R1. You also will need to make sure you see the traffic coming from R2 to R3.
To see the ping traffic hitting R3, you'll need to turn on logging and debug ICMP.
Logging con
Debug Ip icmp (this really changes depending on OS)
Things you're going to need -- just realize these are "ACLs" but they are how we classify IP addresses.
Ip access-list standard NAT_Out
permit host 33.33.33.33
deny any
Here's for the outbound nat pool. These are the addresses you should see on R3 when you get the debugs.
ip nat pool no-overload 10.0.1.5 10.0.1.7 netmask 255.255.255.0 ip nat inside source static........................ what else do you need here?
What would it be called if you used the commands TCP/ UDP?
How about we just use the IP on the interface? ip nat inside source list no-overload interface e1/0
What does the command overload do?
You'll need to configure the NAT directions on the router under the interfaces.
IP nat inside
IP nat outside
Static NAT from outside in.
What are the IPs for the inside global and inside local addresses?
Now NAT 10.0.1.9 in to 22.22.22.22. aka make 22.22.22.22 appear like 10.0.1.9 to the outside world
ip nat inside source static....
Now show me the debugs from both the outside world and the inside router.
What do you notice about the IP addresses?
Where is this helpful?
What groups of addresses would be best to be used internally?
How can you check to see what kind of translations are going through R2?
Actual report part and what you need to turn in:
1) Config snippets.
The ACLs, the NAT commands, and the interfaces.
2) You'll also need to send a snippet of the logs.
This will include the "show ip nat trans" and the debugs.
The debugs should look something like this: ICMP: echo reply sent, src 10.0.1.2, dst 10.0.1.1, topology BASE, dscp 0 topoid 0
3) Answers to my questions. In a nice written format.

Added by Melissa A.

Question

Please give Ace some feedback