mediumMultiple ChoiceObjective-mapped
300-410 Practice Question: The problem with this NAT configuration?…
What is the problem with this NAT configuration?
interface GigabitEthernet0/0 ip address 192.168.1.1 255.255.255.0 ip nat inside
!
interface GigabitEthernet0/1 ip address 203.0.113.1 255.255.255.0
!
ip nat inside source list 1 interface GigabitEthernet0/1 overload access-list 1 permit 192.168.1.0 0.0.0.255
⚠ Common exam trap
Test-takers frequently assume that simply configuring the NAT statement and ACL is enough, overlooking the mandatory interface-level 'ip nat outside' command, which Cisco explicitly tests in the 300-410 exam to ensure understanding of NAT operation fundamentals.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
The interface GigabitEthernet0/1 is missing the 'ip nat outside' command.
The configuration is missing the 'ip nat outside' command on interface GigabitEthernet0/1. For NAT to function, Cisco IOS requires that the inside interface be marked with 'ip nat inside' and the outside interface with 'ip nat outside'. Without this, the router does not know which interface is the external (outside) interface, and the NAT translation will not be applied to outgoing packets.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
The ACL is too permissive; it should only permit specific hosts.
Why it's wrong here
The ACL is correctly permitting the inside network.
- ✓
The interface GigabitEthernet0/1 is missing the 'ip nat outside' command.
Why this is correct
Without 'ip nat outside', the router does not know which interface is the outside for NAT.
- ✗
The 'overload' keyword is unnecessary for this configuration.
Why it's wrong here
Overload is needed for PAT, which is likely intended.
- ✗
The inside interface should be GigabitEthernet0/1.
Why it's wrong here
Inside/outside designations are correct; only the outside interface is missing the command.
Visual reference
Go deeper
Related to this question
About these practice questions
Courseiva writes every 300-410 question from scratch — 1,966 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This 300-410 practice question is part of Courseiva's free Cisco certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the 300-410 exam.