|
Command or Action |
Purpose |
Step 1 |
enable
Example:
|
Enables privileged EXEC mode.
-
Enter your password if prompted.
|
Step 2 |
configure terminal
Example:
Router# configure terminal
|
Enters global configuration mode. |
Step 3 |
access-list access-list-number {permit | deny} ip-addressmask
Example:
Router(config)# access-list 1 permit 10.1.0.0 0.0.255.255
|
Defines a standard access list permitting the IP addresses that are to be translated.
-
The access list must permit only those addresses that are to be translated. (Remember that there is an implicit “deny all” at the end of each access list.) An access list that is too permissive can lead to unpredictable results.
|
Step 4 |
route-map map-tag [permit | deny] [sequence-number]
Example:
Router(config)# route-map isp-1 permit 10
|
Enters route-map configuration mode to configure a route map.
-
The example creates a route map named BGP.
|
Step 5 |
match ip address {access-list access-list-name| prefix-list prefix-list-name}
Example:
Router(config-route-map)# match ip address access-list 1
|
Creates an access list or prefix list match clause entry in a route map to identify traffic to be translated by NAT.
-
The example references the access list created in Step 3 that specifies the 10.1.0.0 0.0.255.255. prefix as match criteria.
|
Step 6 |
match interface interface-type interface-number [...interface-type interface-number]
Example:
Router(config-route-map)# match interface serial 1/0
|
Creates a match clause in a route map to distribute any routes that match out one of the interfaces specified.
-
The example creates a match clause to distribute routes that pass the match clause in Step 5 through serial interface 1/0.
|
Step 7 |
exit
Example:
Router(config-route-map)# exit
|
Exits route-map configuration mode and returns to global configuration mode. |
Step 8 |
Repeat Step 4 through Step 7 for more route map configurations, as required. |
-- |
Step 9 |
ip nat inside source {list {access-list-number| access-list-name} | route-map map-name} {interface type number| pool name} [mapping-id map-id | overload| reversible| vrf vrf-name][pfr]
Example:
Router(config)# ip nat inside source interface FastEthernet1/0 overload pfr
|
Establishes dynamic source translation with overloading, specifying the interface.
-
Use the interface keyword and type and number arguments to specify an interface.
-
Use the pfr keyword to allow PfR to operate with NAT and control traffic class routing using static routing.
|
Step 10 |
interface type number
Example:
Router(config)# interface FastEthernet1/0
|
Specifies an interface and enters interface configuration mode. |
Step 11 |
ip address ip-address mask
Example:
Router(config-if)# ip address 10.114.11.8 255.255.255.0
|
Sets a primary IP address for the interface. |
Step 12 |
ip nat inside
Example:
Router(config-if)# ip nat inside
|
Marks the interface as connected to the inside. |
Step 13 |
exit
Example:
|
Exits interface configuration mode and returns to configuration mode. |
Step 14 |
interface type number
Example:
Router(config)# interface ethernet 0
|
Specifies a different interface and returns to interface configuration mode. |
Step 15 |
ip address ip-address mask
Example:
Router(config-if)# ip address 172.17.233.208 255.255.255.0
|
Sets a primary IP address for the interface. |
Step 16 |
ip nat outside
Example:
Router(config-if)# ip nat outside
|
Marks the interface as connected to the outside. |
Step 17 |
end
Example:
|
Exits interface configuration mode and returns to privileged EXEC mode. |