CCIE Security Practice Labs

Section 9.0: IP Services and Protocol-Independent Features

9.1. Network Address Translation (NAT)

1. Tricky NAT question. Configure NAT on both R6 and R7 for redundancy, as a packet from VLAN-4 can use either the R6 or R7 path, as demonstrated in the following example:

   ! Configure static NAT on R6 and R7 (same on both routers).
   ! <Snip from R6 config>
   
   interface Ethernet0/0
    ip address 173.5.1.2 255.255.255.128
    ip nat inside
   !
   interface Serial1/0
    ip address 173.5.1.130 255.255.255.128
    ip nat outside
   !
   ip nat inside source static 173.5.1.40 173.5.1.135
   								ip nat outside source static 173.5.1.136 173.5.1.41
   
   
   R6#show ip nat translations Pro Inside global Inside local Outside local Outside global --- 173.5.1.135 173.5.1.40 --- --- --- --- --- 173.5.1.41 173.5.1.136 ...