mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: Runs the following command to verify NAT on an…
A network engineer runs the following command to verify NAT on an interface:
R1# show ip nat interface GigabitEthernet0/1
GigabitEthernet0/1 is up, line protocol is up NAT: inside, active NAT: outside, active NAT: overload, active
What is the issue with this configuration?
⚠ Common exam trap
Cisco often tests the misconception that an interface can be both inside and outside for NAT, leading candidates to overlook the explicit 'inside' and 'outside' flags in the 'show ip nat interface' output and incorrectly assume the configuration is valid.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The interface is configured as both inside and outside, which is invalid.
The command output shows that GigabitEthernet0/1 is configured as both 'inside' and 'active' and 'outside' and 'active' simultaneously. In Cisco IOS NAT, an interface can be either a NAT inside interface or a NAT outside interface, but not both. This misconfiguration causes ambiguous NAT behavior because the router cannot determine whether traffic entering or leaving the interface should be translated from inside to outside or vice versa, leading to translation failures.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
The interface is configured as both inside and outside, which is invalid.
Why this is correct
NAT requires separate inside and outside interfaces.
- ✗
The interface is correctly configured for NAT.
Why it's wrong here
Having both roles on one interface is not supported.
- ✗
The interface is down.
Why it's wrong here
The output shows it is up.
- ✗
Overload is not active.
Why it's wrong here
Overload is shown as active.
Visual reference
Go deeper
Related to this question
About these practice questions
This 300-410 question is part of Courseiva's 1,966-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.