352-001 · Question #780
Two enterprise networks must be connected together Both networks are using the same private IP addresses. The client requests from both sides should be translated using hide NAT (dynamic NAT) with…
The correct answer is D. Two different NAT pools must be used for the ip nat inside source and the ip nat outside source. The question tests how to configure bidirectional dynamic NAT with overload on a single Cisco IOS router when both sides use overlapping private IP address space.
Question
Two enterprise networks must be connected together Both networks are using the same private IP addresses. The client requests from both sides should be translated using hide NAT (dynamic NAT) with the overload feature to save IF addresses from the NAT pools. Which design addresses this requirement using only one Cisco I OS NAT router for both directions?
Options
- AThis is not possible, because two Cisco IOS NAT routers are required to do dynamic NAT, with
- BThe ip nat inside and ip nat outside commands must be configured at the interfaces with the
- CThe overload feature is the default and does not have to be configured.
- DTwo different NAT pools must be used for the ip nat inside source and the ip nat outside source
- EThe Nat Virtual interface must be used to achieve this requirement.
How the community answered
(35 responses)- A3% (1)
- B9% (3)
- C29% (10)
- D46% (16)
- E14% (5)
Why each option
The question tests how to configure bidirectional dynamic NAT with overload on a single Cisco IOS router when both sides use overlapping private IP address space.
A single Cisco IOS router is fully capable of performing dynamic NAT in both directions at the same time by combining inside source and outside source configurations, making a second router unnecessary.
Applying 'ip nat inside' and 'ip nat outside' to interfaces is a prerequisite for NAT operation but does not resolve the overlapping address problem without also defining separate pools for each translation direction.
The overload keyword enabling PAT is not enabled by default and must be explicitly appended to the 'ip nat inside source' or 'ip nat outside source' command.
When two networks share overlapping private address space and require bidirectional NAT on a single router, two separate NAT pools must be defined - one used with 'ip nat inside source' for translating outbound inside traffic and a different one used with 'ip nat outside source' for translating inbound outside traffic - preventing address collisions and allowing the router to maintain correct translation state in both directions simultaneously.
NAT Virtual Interface removes the inside/outside interface distinction but does not address the core requirement of maintaining two separate NAT pools for translating overlapping addresses in both directions.
Concept tested: Bidirectional NAT with overlapping private address spaces
Source: https://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/13772-12.html
Topics
Community Discussion
No community discussion yet for this question.