CloudLabBox
Try the free demo

CCNA lab 26 of 46

NAT and PAT on an IOS XE edge router

Connect a private office to the Internet through a Catalyst-class IOS XE router: publish a web server with static NAT, share a small public pool with dynamic NAT, then switch to PAT so every host shares one address, and read the translation table at each step.

Run this lab

It needs Lite: its 5 nodes are set to 5 vCPU and 7,680 MB in total. That fits the free demo too.

In your workspace: Shared, then CCNA 200-301 guided labs, then 26 - NAT and PAT on an IOS XE edge router

Try it free for 30 minutesRun it on Lite from £3 a day

The free demo needs no card and no email. Every lab plan includes every guided lab.

Level
Intermediate
Time
About 60 minutes
Nodes need
5 vCPU, 7,680 MB
Smallest plan
Lite

The scenario

Penrose Architects has bought a small Internet service with five usable public addresses, 203.0.113.1–203.0.113.6 (/29). The ISP router uses .1, and the company's new IOS XE edge router (EDGE, a CSR 1000v) uses .2. Inside, everything is private (RFC 1918): two office LANs and a DMZ with a web server (SRV1). The ISP knows nothing about the private networks, so nothing inside can reach the Internet yet.

DeviceInterfaceAddressNAT role
EDGEGi1203.0.113.2/29outside
EDGEGi2 / Gi410.26.1.1/24 / 10.26.2.1/24inside (offices)
EDGEGi310.26.9.1/24inside (DMZ)
ISPGi0/0 / Lo0203.0.113.1/29 / 198.51.100.1 (Internet web server)–
PC1Gi2 LAN10.26.1.10dynamic NAT, then PAT
H1Gi4 LAN10.26.2.11 (you set it)dynamic NAT, then PAT
SRV1DMZ10.26.9.80static NAT to 203.0.113.5

What you’ll practise

  • Explain inside local, inside global, outside local and outside global addresses
  • Mark NAT inside and outside interfaces on IOS XE
  • Configure static NAT for a server and test it from outside
  • Configure dynamic NAT with a pool and an ACL, and recognise pool exhaustion
  • Configure PAT (overload) on the outside interface and read translations and statistics

The tasks

  1. Learn the NAT vocabulary
  2. Mark the inside and outside interfaces
  3. Publish the web server with static NAT
  4. Share a small pool with dynamic NAT
  5. Replace the pool with PAT
  6. Read the statistics

The Lab Tasks pane has the scenario, these tasks, the checks to run, hints and the full solution.

Topology and devices

The network as it opens in EVE-NG, drawn from the lab’s own canvas, and the image each node runs.

Topology of NAT and PAT on an IOS XE edge router5 nodes, 4 links. Every link is listed as text below the diagram.EDGEISPPC1SRV1H1Gi1Gi0/0Gi3eth0Gi2eth0Gi4eth0
5 nodes, with the interface names each link uses. On a narrow screen, scroll the diagram sideways.
Every link, as text
  • EDGE Gi1 to ISP Gi0/0
  • EDGE Gi2 to PC1 eth0
  • EDGE Gi3 to SRV1 eth0
  • EDGE Gi4 to H1 eth0
Nodes in NAT and PAT on an IOS XE edge router, with the image each runs and the vCPU and RAM it’s set to
NodeDeviceImage in Add NodeSet to
EDGECisco CSR 1000vcsr1000vng-universalk9.17.03.08a-serial1 vCPU, 4,096 MB
ISPCisco IOSvvios-adventerprisek9-m.SPA.159-3.M61 vCPU, 1,024 MB
PC1VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB
SRV1VPCS hostBuilt in to EVE-NGCounted as 1 vCPU, 1,024 MB
H1Alpine Linuxclbalpinebase-alpine-base-3-20-31 vCPU, 512 MB

How to open this lab

  1. Sign in to your workspace at lab.cloudlabbox.com.

  2. In File Manager, open Shared, then the folder CCNA 200-301 guided labs.

  3. Open 26 - NAT and PAT on an IOS XE edge router and start its nodes, then open Lab Tasks for the scenario and the steps.

The lab is read-only. You can start the nodes and configure the devices, but changes to the topology can’t be saved. To change it, rebuild it in your own folder.

More CCNA labs

All CCNA labs

Related labs in other courses

CloudLabBox is independent of Cisco. The lab follows exam topics and isn’t vendor training material; vendor names identify the exams and the images in the workspace.