PAT onto the Outside Interface (SOHO Edge)

Bundle lab · $29.99

Implement and verify interface-based PAT (overload) on a single-edge SOHO router. Inside hosts on 192.168.10.0/24 share the router’s lone public IP (203.0.113.1) on its outside interface. Validate NAT translations, ACL matches, and simultaneous host access, and practice troubleshooting common misconfigurations (inside/outside role reversal, ACL selection errors).

Learning objectives

• Configure PAT directly on the WAN interface using ip nat inside source list <id> interface <wan> overload
• Correctly mark ip nat inside and ip nat outside on the appropriate interfaces
• Author a standard ACL that selects the inside source subnet for translation
• Validate NAT operations with show ip nat translations, show ip nat statistics, and ACL hit counts
• Test from inside endpoints to confirm both hosts share the same public IP with unique ports
• Troubleshoot failures caused by incorrect interface role marking or ACL mismatches

Troubleshooting focus

• NAT not creating translations because inside/outside roles are reversed
• ACL used for NAT source selection is empty/mismatched (no hits)
• Routing to the ISP works but return traffic appears broken due to missing/wrong NAT
• Outside-initiated traffic fails as expected (no static mappings) while inside-initiated flows succeed
• Mis-typed interface in the NAT rule (overload bound to the wrong interface)