CCNA NAT3: Dynamic NAT with an Address Pool

Bundle lab · $29.99

Configure dynamic one-to-one NAT using a public address pool on an IOS router between a private LAN and a simulated ISP. Two inside hosts draw from a two-address public pool on-demand. Validate that no translations exist before traffic, that each host receives a distinct global address after generating traffic, and that entries age out when idle.

Learning objectives

• Mark inside vs. outside interfaces correctly so translations occur only across the edge
• Build a dynamic NAT pool and bind it to an ACL that matches inside sources
• Verify on-demand translations with show ip nat translations/statistics
• Differentiate dynamic NAT pool behavior from PAT overload
• Troubleshoot translation failures due to ACL scope, interface role, or routing

Troubleshooting focus

• Inside/outside roles reversed so no translation occurs
• ACL 1 does not match the intended inside subnet (mask vs wildcard mismatch)
• Pool addresses not on or reachable from the outside segment
• Missing default route on the NAT router
• Testing from the outside expecting inbound initiation (dynamic NAT does not create inbound reachability)