Internet Protocols - CCIE Routing and Switching Exam Certification Guide - page 299

NAT Example Figure 6-17

Inside Network Public Network

Ethernet 0
(inside)

Serial 0
(outside)

NAT Router

Inside local addresses:
192.168.10.0/24
192.168.11.0/24

Inside global address pool:
200.100.100.1 to 200.100.100.254

NAT Configuration Example

Example 6-8

hostname router3
!
ip nat pool ccie 200.100.100.1 200.100.100.254 netmask 255.255.255.0
!
ip nat inside source list 5 pool ccie
!
interface ethernet 0
description Inside interface
ip address 192.168.10.1 255.255.255.0
ip nat inside
!
interface serial 0
description Outside interface
ip address 200.100.101.1 255.255.255.252
ip nat outside
!
access-list 5 permit 192.168.10.0 0.0.0.255
access-list 5 permit 192.168.11.0 0.0.0.255

To verify and troubleshoot NAT, use the commands in Table 6-18.

NAT Verification Commands Table 6-18

Command Description

show ip nat translations Displays active NAT translations

show ip nat statistics Displays NAT statistics

clear ip nat translation * Clears all dynamic translations

debug ip nat [ list ] [ detailed ] Provides debugging information for NAT

NAT is usually deployed at the edge of the network where there are two separate administrative
domains or at the internal network edge with the Internet.