nerdexam
Cisco

200-101 · Question #165

Refer to the exhibit. What command sequence will enable PAT from the inside to outside network? ip nat pool isp-net 1.2.4.10 1.2.4.240 netmask 255.255.255.0 ! interface ethernet 1 description ISP Conn

The correct answer is C. (config)ip nat inside source list 1 interface ethernet1 overload. To enable PAT using the router's outside interface IP address instead of a NAT pool, the correct command references the access list and the outside interface with the 'overload' keyword.

Implement Wide-Area Networks

Question

Refer to the exhibit. What command sequence will enable PAT from the inside to outside network? ip nat pool isp-net 1.2.4.10 1.2.4.240 netmask 255.255.255.0 ! interface ethernet 1 description ISP Connection ip address 1.2.4.2 255.255.255.0 ip nat outside ! interface ethernet 0 description ethernet to firewall ip address 10.10.0.1 255.255.255.0 ip nat inside ! access-list 1 permit 10.0.0.0 0.255.255.255

Options

  • A(config)ip nat pool isp-net 1.2.4.2 netmask 255.255.255.0 overload
  • B(config)ip nat inside overload
  • C(config)ip nat inside source list 1 interface ethernet1 overload
  • D(config-if) ip nat inside overload

How the community answered

(26 responses)
  • A
    4% (1)
  • B
    15% (4)
  • C
    73% (19)
  • D
    8% (2)

Why each option

To enable PAT using the router's outside interface IP address instead of a NAT pool, the correct command references the access list and the outside interface with the 'overload' keyword.

A(config)ip nat pool isp-net 1.2.4.2 netmask 255.255.255.0 overload

This command attempts to redefine the NAT pool with only an overload flag and a single IP, but the syntax is incorrect and does not reference the access list that identifies inside traffic.

B(config)ip nat inside overload

'ip nat inside overload' is not a valid global configuration command; the correct syntax must specify the source list and an interface or pool.

C(config)ip nat inside source list 1 interface ethernet1 overloadCorrect

The command 'ip nat inside source list 1 interface ethernet1 overload' instructs the router to translate all inside source addresses matched by access-list 1 to the IP address of ethernet1 (the outside interface), and the 'overload' keyword enables PAT so multiple inside hosts share that single outside IP using unique port numbers.

D(config-if) ip nat inside overload

'ip nat inside overload' in interface configuration mode is not valid IOS syntax; NAT overload is configured in global configuration mode.

Concept tested: PAT configuration using interface overload command

Source: https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/13772-12.html

Topics

#PAT configuration#NAT overload#ip nat inside source#overload keyword

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full 200-101 Practice