Courseiva
CCNA lab 14

NAT: PAT for internet access and static NAT for a server

Give a private LAN internet access with PAT on the edge router's outside interface, and publish an internal web server with static NAT.

About 25 minutes 7 devices 3 tasksIntermediate

Scenario

The office LAN 192.168.1.0/24 sits behind R1. The ISP router has no route to private addresses, so nothing on the LAN can reach the internet yet (try `ping 8.8.8.8` from PC1). Mark R1's inside and outside interfaces, translate the LAN to R1's outside address with PAT, and publish the web server SRV (192.168.1.50) as 203.0.113.5 so the outside host WEB can open it.

eth0Fa0/1eth0Fa0/2eth0Fa0/3Gi0/1Gi0/0/0Gi0/0/1Gi0/0Gi0/1eth0PC1PC1 — PCPC2PC2 — PCSRVSRV — ServerSW1SW1 — Switch (Catalyst 2960-24)R1R1 — Router (ISR 4321)ISPISP — Router (2911)WEBWEB — Server

Your tasks

  1. PC1 and PC2 can ping 8.8.8.8 (PAT to R1's outside address).
  2. PC1 can open the outside web server WEB (198.51.100.10, TCP 80).
  3. The outside host WEB can open SRV's web page at 203.0.113.5 (TCP 80).

The lab checks the result, not the exact commands. For example, a ping task passes only when the ping really succeeds through the network you built.

Start the lab