Course info
May 15, 2015
1h 57m

NAT and PAT are simply a part of every network today. As a network security administrator you must understand how to configure and verify the various NAT types and also determine when these would be appropriate. This course will teach you the essentials of NAT and PAT, and also how to troubleshoot NAT when things don't work. This course will also help to prepare you for the 300-206 SENSS exam, which is part of the Cisco CCNP Security.

About the author
About the author

Brandon is a CCIE (Security, #23837), Cisco Press author, and has over 13 years experience as a Cisco Instructor.

More from the author
VPN Fundamentals for CCNP® Security
1h 52m
Feb 12, 2018
ISE BYOD for CCNP Security (300-208) SISAS
2h 8m
Nov 8, 2017
More courses by Brandon Carroll
Section Introduction Transcripts
Section Introduction Transcripts

Configuring Static NAT and PAT for Cisco IOS
Hi there everyone, and welcome to Configuring Static NAT and PAT for Cisco IOS. Let's go ahead and jump right into our module overview. In this module we're gonna review the GameOn network requirements. Now GameOn is a fictitious company that we're using for the purposes of this course. We're gonna talk a little bit about them and what their requirements for network address translation are. We're gonna talk about interface definitions, a very important element of configuring NAT on a Cisco router. We're also gonna talk about how addresses are mapped and the configuration elements that would be required to set up static NAT translations. We'll then jump into a lab demonstration and we'll configure that GameOn! Networks lab topology so that they support static NAT translations and people can access their servers externally. So let's go ahead and jump right in.

Configuring Dynamic NAT and PAT for Cisco IOS
Well, hello everybody and welcome back to another module. This is Configuring Dynamic NAT and PAT for Cisco IOS. Let's take a look at what we're going to see in this module. We're going to start out by reviewing our lab topology. We just worked with it in the last module where we configured static NAT and PAT. So we're going to be working with that same topology, but we're going to look at it and lay out where we need Dynamic NAT in this network and then we're going to lay out where we need Dynamic PAT and remember, PAT is port address translation. We're going to lay out where we need that. We'll talk about, you know, why we have both of them in this network and some of the drawbacks. We'll also take a look at the configuration elements here. We'll implement the configuration and verify in the lab network, so let's go ahead and have at it. Here is our topology review.

Troubleshooting NAT
Alright, it's time to troubleshoot NAT so welcome to our module, Troubleshooting NAT. Let's take a look at what we're going to do in this module, some important topics that we're going to cover. We'll talk about how this is going to benefit you in your day to day networking activity or your involvement with network address translation. So first off, we're going to look at some commands and tools that would be used to troubleshoot NAT. So we're just going to show you what those commands would be and then we'll get into the demonstration and troubleshooting. We'll use some of those commands in a practical example. We're going to also talk about a troubleshooting flow. So what steps would you go through? You know, you could start anywhere, but really what's a good place to begin to make sure that I don't miss anything as I start troubleshooting? Now the steps that we show you in the troubleshooting flow, they're not going to be the absolute definitive 'this is exactly how you do it, every single time, ' but again, it's a good starting point. So we're going to talk about that troubleshooting flow, going through the motions of validating our configuration and making sure that we have connectivity. Then we're going to talk about an issue that's come up in our sample network, the GameOn! Networks topology that we've been working with and we'll go ahead and see what we can do to correct the problem that's occurred. And then we'll go through a troubleshooting demo and we'll show you how we might validate our configuration and what would need to be modified to get the configuration up and functional again.