Instructor Materials Chapter 9: NAT for IPv4

Slides:



Advertisements
Similar presentations
CST Computer Networks NAT CST 415 4/10/2017 CST Computer Networks.
Advertisements

© 2006 Cisco Systems, Inc. All rights reserved.Cisco Public 1 Version 4.0 Implementing IP Addressing Services Accessing the WAN – Chapter 7.
© 2008 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 1 W. Schulte Chapter 5: Network Address Translation for IPv4  Connecting.
© 2008 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 1 Lecture15: Network Address Translation for IPv4 Connecting Networks.
Cisco Certified Network Associate
© 2002, Cisco Systems, Inc. All rights reserved..
© 2007 Cisco Systems, Inc. All rights reserved.ICND1 v1.0—5-1 WAN Connections Enabling the Internet Connection.
Ch. 1 – Scaling IP Addresses NAT/PAT and DHCP CCNA 4 version 3.0.
Ch. 1 – Scaling IP Addresses NAT/PAT and DHCP
© 2008 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 1 Chapter 10: DHCP Routing and Switching Essentials.
© 2006 Cisco Systems, Inc. All rights reserved. ICND v2.3—4-1 Managing IP Traffic with ACLs Scaling the Network with NAT and PAT.
© 2003, Cisco Systems, Inc. All rights reserved. ICND v2.1—4-1 © 2003, Cisco Systems, Inc. All rights reserved. 1 Scaling the Network with NAT and PAT.
CCNA Guide to Cisco Networking Fundamentals Fourth Edition Chapter 9 Network Services.
© 2008 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 1 CCNA 5.0 Planning Guide Chapter 5: Network Address Translation for IPv4.
Lecture Week 7 Implementing IP Addressing Services.
Sybex CCENT Chapter 13: Network Address Translation Instructor & Todd Lammle.
© 2007 Cisco Systems, Inc. All rights reserved.ICND2 v1.0—7-1 Address Space Management Scaling the Network with NAT and PAT.
© 2006 Cisco Systems, Inc. All rights reserved.Cisco Public 1 Version 4.0 4: Addressing in an Enterprise Network Introducing Routing and Switching in the.
CN2668 Routers and Switches Kemtis Kunanuraksapong MSIS with Distinction MCTS, MCDST, MCP, A+
Network Address Translation
1 © 2003, Cisco Systems, Inc. All rights reserved. CCNA 4 v3.0 Module 1 Scaling IP Addresses.
NAT (Network Address Translation) Natting means "Translation of private IP address into public IP address ". In order to communicate with internet we must.
Page 1 NAT & VPN Lecture 8 Hassan Shuja 05/02/2006.
© 2006 Cisco Systems, Inc. All rights reserved.Cisco PublicITE I Chapter 6 1 Implementing IP Addressing Services Accessing the WAN – Chapter 7.
Implementing IP Addressing Services Accessing the WAN – Chapter 7.
© 2006 Cisco Systems, Inc. All rights reserved.Cisco Public 1 Version 4.0 4: Addressing in an Enterprise Network Introducing Routing and Switching in the.
© 2007 Cisco Systems, Inc. All rights reserved.Cisco Public ITE PC v4.0 Chapter 1 1 Planning the Addressing Structure Working at a Small-to-Medium Business.
1 © 2004, Cisco Systems, Inc. All rights reserved. CCNA 4 v3.1 Module 1 Scaling IP Addresses.
CCNA 4 v3.1 Module 1 Scaling IP Addresses
© 2008 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 1 Chapter 11: Network Address Translation for IPv4 Routing And Switching.
Configuring NAT and PAT Chapter 18 powered by DJ 1.
1 © 2004, Cisco Systems, Inc. All rights reserved. Scaling IP Addresses Network Address Translation(NAT)
Scaling Networks with Network Address Translation Scaling Networks with Network Address Translation Solutions for IPv4 Security and Scalability ECPI College.
IP Addressing.
N ETWORK S ECURITY Network Address Translation. C ONTENTS What is NAT NAT Terminology How NAT works NAT translation Dynamic, static and overloading Advantages.
© 2006 Cisco Systems, Inc. All rights reserved.Cisco Public 1 Version 4.0 Implementing IP Addressing Services Accessing the WAN – Chapter 7.
1 Pertemuan 14 Scaling Networks with NAT and PAT.
CCNA4-1 Chapter 7-1 IP Addressing Services Scaling Networks With Network Address Translation (NAT)
Configuring NAT. Configuring Static NAT There are two basic tasks to perform when configuring static NAT translations: Create the mapping between the.
© 2001, Cisco Systems, Inc. CSPFA 2.0—5-1 Chapter 5 Cisco PIX Firewall Translations.
CCNA4-1 Chapter 7-1 NAT Chapter 11 Routing and Switching (CCNA2)
© 2006 Cisco Systems, Inc. All rights reserved.Cisco PublicITE I Chapter 6 1 Implementing IP Addressing Services Accessing the WAN – Chapter 7.
Network Address Translation (NAT)
Planning the Addressing Structure
Implementing IP Addressing Services
Instructor Materials Chapter 8: DHCP
© 2002, Cisco Systems, Inc. All rights reserved.
IP Addressing Services Part I
Instructor Materials Chapter 7: Access Control Lists
Chapter 13 Network Address Translation
Instructor Materials Chapter 8: Subnetting IP Networks
Instructor Materials Chapter 9: NAT for IPv4
NAT / PAT.
Planning the Addressing Structure
Chapter 8: Subnetting IP Networks
Routing and Switching Essentials v6.0
Introducing To Networking
NAT , Device Discovery Chapter 9 , chapter 10.
Implementing IP Addressing Services
CIS 82 Routing Protocols and Concepts Chapter 11 NAT
Routing and Switching Essentials v6.0
NAT / PAT.
Cabrillo College Building Cisco Remote Access Network
Planning the Addressing Structure
Implementing IP Addressing Services
Planning the Addressing Structure
Planning the Addressing Structure
Chapter 11: Network Address Translation for IPv4
Prepared by :Adeel Ahmad
Sybex CCNA Chapter 11: Network Address Translation.
Presentation transcript:

Instructor Materials Chapter 9: NAT for IPv4 Cisco Networking Academy Program Routing and Switching Essentials v6.0 Chapter 9: NAT for IPv4 CCNA Routing and Switching Routing and Switching Essentials v6.0

Routing and Switching Essentials v6.0 Chapter 9: NAT for IPv4 Cisco Networking Academy Program Routing and Switching Essentials v6.0 Chapter 9: NAT for IPv4 Routing and Switching Essentials v6.0

Chapter 9 - Sections & Objectives 9.1 Network Layer Protocols Explain how NAT provides IPv4 address scalability in a small to medium-sized business network. 9.2 Configuring NAT Configure NAT services on the edge router to provide IPv4 address scalability in a small to medium-sized business network. 9.3 Troubleshoot NAT Configurations Troubleshoot NAT issues in a small to medium-sized business network. 14

9.1 NAT Operation Chapter 9: NAT for IPv4 Cisco Networking Academy Program Routing and Switching Essentials v6.0 Chapter 9: NAT for IPv4

NAT Operation NAT Characteristics IPv4 Private Address Space 10.0.0.0 /8, 172.16.0.0 /12, and 192.168.0.0 /16 What is NAT? Process to translate network IPv4 address Conserve public IPv4 addresses Configured at the border router for translation NAT Terminology Inside address Inside local address Inside global address Outside address Outside local address Outside global address 9.1 – NAT Operation 9.1.1 – NAT Characteristics

NAT Operation Types of NAT Static NAT One-to-one mapping of local and global addresses Configured by the network administrator and remain constant. Dynamic NAT Uses a pool of public addresses and assigns them on a first-come, first-served basis Requires that enough public addresses for the total number of simultaneous user sessions Port Address Translation (PAT) Maps multiple private IPv4 addresses to a single public IPv4 address or a few addresses Also known as NAT overload Validates that the incoming packets were requested Uses port numbers to forward the response packets to the correct internal device 9.1 – NAT Operation 9.1.2 – Types of NAT

NAT Operation NAT Advantages Advantages of NAT Conserves the legally registered addressing scheme Increases the flexibility of connections to the public network Provides consistency for internal network addressing schemes Provides network security Disadvantages of NAT Performance is degraded End-to-end functionality is degraded End-to-end IP traceability is lost Tunneling is more complicated Initiating TCP connections can be disrupted 9.1 – NAT Operation 9.1.3 – NAT Advantages

9.2 Configuring NAT Chapter 9: NAT for IPv4 Cisco Networking Academy Program Routing and Switching Essentials v6.0 Chapter 9: NAT for IPv4

Configuring NAT Configuring Static NAT Create the mapping between the inside local and outside local addresses ip nat inside source static local-ip global-ip Define which interfaces belong to the inside network and which belong to the outside network ip nat inside ip nat outside Analyzing Static NAT Verifying Static NAT show ip nat translations show ip nat statistics clear ip nat statistics 9.2 – Configuring NAT 9.2.1 – Configuring Static NAT

Configuring NAT Configuring Dynamic NAT Dynamic NAT Operation The pool of public IPv4 addresses (inside global address pool) is available to any device on the inside network on a first-come, first-served basis. With dynamic NAT, a single inside address is translated to a single outside address. The pool must be large enough to accommodate all inside devices. A device is unable to communicate to any external networks if no addresses are available in the pool. 9.2 – Configuring NAT 9.2.2 – Configuring Dynamic NAT

Configuring NAT Configuring Dynamic NAT (Cont.) Create the mapping between the inside local and outside local addresses ip nat pool name start-ip end-ip {netmask netmask | prefix-length prefix-length} Create a standard ACL to permit those addresses to be translated access-list access-list-number permit source [source-wildcard] Bind the ACL to the pool ip nat inside source list access-list-number pool name Identify the inside and outside interfaces ip nat inside ip nat outside 9.2 – Configuring NAT 9.2.2 – Configuring Dynamic NAT

Configuring NAT Configuring Dynamic NAT (Cont.) Analyzing Dynamic NAT Verifying Dynamic NAT show ip nat translations show ip nat translations verbose clear ip nat statistics clear ip nat translations * 9.2 – Configuring NAT 9.2.2 – Configuring Dynamic NAT

Configuring NAT Configuring Port Address Translations (PAT) Configuring PAT: Address Pool Create the mapping between the inside local and outside local addresses ip nat pool name start-ip end-ip {netmask netmask | prefix-length prefix-length} Create a standard ACL to permit those addresses to be translated access-list access-list-number permit source [source-wildcard] Bind the ACL to the pool ip nat inside source list access-list-number pool name Identify the inside and outside interfaces ip nat inside ip nat outside 9.2 – Configuring NAT 9.2.3 – Configuring Port Address Translations (PAT)

Configuring NAT Configuring Port Address Translations (PAT) (Cont.) Configuring PAT: Single Address Define a standard ACL to permit those addresses to be translated access-list access-list-number permit source [source-wildcard] Establish dynamic source translation, specify the ACL, exit interface, and overload option ip nat inside source list access-list-number interface type name overload Identify the inside and outside interfaces ip nat inside ip nat outside 9.2 – Configuring NAT 9.2.3 – Configuring Port Address Translations (PAT)

Configuring NAT Configuring Port Address Translations (PAT) (Cont.) Analyzing PAT Verifying PAT show ip nat translations show ip nat statistics slear ip nat statistics 9.2 – Configuring NAT 9.2.3 – Configuring Port Address Translations (PAT)

Configuring NAT Port Forwarding Port forwarding is the act of forwarding a network port from one network node to another. A packet sent to the public IP address and port of a router can be forwarded to a private IP address and port in inside network. Port forwarding is helpful in situations where servers have private addresses, not reachable from the outside networks. Wireless Router Example Configuring Port Forwarding with IOS ip nat inside source [static {tcp | udp local-ip local-port global-ip global-port} [extendable] 9.2 – Configuring NAT 9.2.4 – Port Forwarding

Configuring NAT Configuring NAT and IPv6 NAT for IPv6? IPv6 with a 128-bit address provides 340 undecillion addresses. Address space is not an issue for IPv6. IPv6 makes IPv4 public-private NAT unnecessary by design; however, IPv6 does implement a form of private addresses, and it is implemented differently than they are for IPv4. IPv6 Unique Local Address IPv6 unique local addresses (ULAs) are designed to allow IPv6 communications within a local site. ULAs are not meant to provide additional IPv6 address space. ULAs have the prefix FC00::/7, which results in a first hextet range of FC00 to FDFF. ULAs are also known as local IPv6 addresses (not to be confused with IPv6 link-local addresses). 9.2 – Configuring NAT 9.2.5 – Configuring NAT and IPv6

Configuring NAT Configuring NAT and IPv6 (Cont.) NAT for IPv6 IPv6 also uses NAT, but in a much different context. In IPv6, NAT is used to provide transparent communication between IPv6 and IPv4. NAT64 is not intended to be a permanent solution; it is meant to be a transition mechanism. Network Address Translation-Protocol Translation (NAT-PT) was another NAT-based transition mechanism for IPv6, but is now deprecated by IETF. NAT64 is now recommended. 9.2 – Configuring NAT 9.2.5 – Configuring NAT and IPv6

9.3 Troubleshooting NAT Chapter 9: NAT for IPv4 Cisco Networking Academy Program Routing and Switching Essentials v6.0 Chapter 9: NAT for IPv4

Troubleshooting NAT Troubleshooting NAT Configurations Troubleshooting NAT: show commands clear ip nat statistics clear ip nat translations * show ip nat statistics Show ip nat translations Troubleshooting NAT: debug commands debug ip nat 9.3 – Troubleshooting NAT 9.3.1 – Troubleshooting NAT Configurations

9.4 Chapter Summary Chapter 9: NAT for IPv4 Cisco Networking Academy Program Routing and Switching Essentials v6.0 Chapter 9: NAT for IPv4

Chapter Summary Summary How NAT is used to help alleviate the depletion of the IPv4 address space. NAT conserves public address space and saves considerable administrative overhead in managing adds, moves, and changes. NAT for IPv4, including: NAT characteristics, terminology, and general operations Different types of NAT, including static NAT, dynamic NAT, and NAT with overloading Benefits and disadvantages of NAT The configuration, verification, and analysis of static NAT, dynamic NAT, and NAT with overloading. How port forwarding can be used to access an internal devices from the Internet. Troubleshooting NAT using show and debug commands. How NAT for IPv6 is used to translate between IPv6 addresses and IPv4 addresses. 9.4.1 - Summary