Home > NAT Questions

NAT Questions

August 25th, 2015 in ROUTE 300-101 Go to comments

Question 1

Question 2

Explanation

First we will not mention about the effect of the “extendable” keyword. So the purpose of the command “ip nat inside source static tcp 192.168.1.50 80 209.165.201.1 8080” is to translate packets on the inside interface with a source IP address of 192.168.1.50 and port 80 to the IP address 209.165.201.1 with port 8080. This also implies that any packet received on the outside interface with a destination address of 209.165.201.1:8080 has the destination translated to 192.168.1.50:80. Therefore answer C is correct.

Answer A is not correct this command “allows host 192.168.1.50 to access external websites using TCP port 80”, not port 8080.

Answer B is not correct because it allows external clients to connect to a web server at 209.165.201.1. The IP addresses of clients should not be 209.165.201.1.

Answer D is not correct because the configuration is correct.

Now we will talk about the keyword “extendable”.

Usually, the “extendable” keyword should be added if the same Inside Local is mapped to different Inside Global Addresses (the IP address of an inside host as it appears to the outside network). An example of this case is when you have two connections to the Internet on two ISPs for redundancy. So you will need to map two Inside Global IP addresses into one inside local IP address. For example:

nat_extendable.jpg

NAT router:
ip nat inside source static 192.168.1.1 200.1.1.1 extendable
ip nat inside source static 192.168.1.1 200.2.2.2 extendable
//Inside Local: 192.168.1.1 ; Inside Global: 200.1.1.1 & 200.2.2.2

In this case, the traffic from ISP1 and ISP2 to the Server is straightforward as ISP1 will use 200.1.1.1 and ISP2 will use 200.2.2.2 to reach the Server. But how about the traffic from the Server to the ISPs? In other words, how does NAT router know which IP (200.1.1.1 or 200.2.2.2) it should use to send traffic to ISP1 & ISP2 (this is called “ambiguous from the inside”). We tested in GNS3 and it worked correctly! So we guess the NAT router compared the Inside Global addresses with all of IP addresses of the “ip nat outside” interfaces and chose the most suitable one to forward traffic.

This is what Cisco explained about “extendable” keyword:

“They might also want to define static mappings for a particular host using each provider’s address space. The software does not allow two static translations with the same local address, though, because it is ambiguous from the inside. The router will accept these static translations and resolve the ambiguity by creating full translations (all addresses and ports) if the static translations are marked as “extendable”. For a new outside-to-inside flow, the appropriate static entry will act as a template for a full translation. For a new inside-to-outside flow, the dynamic route-map rules will be used to create a full translation”.

(Reference: http://www.cisco.com/en/US/technologies/tk648/tk361/tk438/technologies_white_paper09186a0080091cb9.html)

But it is unclear, what will happen if we don’t use a route-map?

Question 3

Explanation

The command “ip nat inside source list 1 int s0/0 overload” translates all source addresses that pass access list 1, which means all the IP addresses, into an address assigned to S0/0 interface. Overload keyword allows to map multiple IP addresses to a single registered IP address (many-to-one) by using different ports.

Question 4

Explanation

The command “ip nat inside source list 10 interface FastEthernet0/1 overload” configures NAT to overload on the address that is assigned to the Fa0/1 interface.

Comments
  1. route
    February 5th, 2016

    I think this is new Updated.

  2. i
    February 12th, 2016

    yah its the latest update

  3. anom
    March 14th, 2016

    How come question 4: Which command allows hosts that are connected to FastEthernet0/2 to access the Internet?

    But the answer is: A. ip nat inside source list 10 interface FastEthernet0/1 overload

    instead of

    C. ip nat inside source list 10 interface FastEthernet0/2 overload ???

  4. conan
    March 22nd, 2016

    because ip nat INSIDE source list translates the source of IP packets that are traveling inside to outside, your inside address is the private ip which resides on port FE0/2 and your outside address is the public ip which is on FE0/1.
    so the correct answer is
    A. ip nat inside source list 10 interface FastEthernet0/1 overload

  5. Jason
    April 30th, 2016

    Where can I find lab material of CCNP?
    I got books of ccnp 300 101 and others. But on these books there is no lab.

  6. Marek
    May 30th, 2016

    You can get premium questions and answer from here https://twitter.com/premiumdumps1/status/737391667360206849 its the 149Q dumps , passed last week with it

  7. Jarel
    July 7th, 2016

    For question 4 … C is correct as stated.

    Source list 10 specifies local addresses.

    interface FastEthernet0/1 specifies the global address.

    Therefore this is Natting Inside to outside.

  8. Mandy
    July 18th, 2016

    Pass your 300-101 through updated exam guides of http://pass4surekey.com/exam/300-101.html

  9. tezz
    July 27th, 2016

    Hi, Where are the questions?
    I am logged in but can only see the answers.

  10. Anonymous
    August 9th, 2016

    looking for nuggets at cheap price drop me an email at {email not allowed}..

  11. kk
    September 19th, 2016

    good

  12. what now?
    October 4th, 2016

    All, I failed today with a 640. The ‘300-101: Implementing Cisco IP Routing’ exam is completely different then what is on this site. Not even close. There are maybe 10 questions that are the same… What happened???

  13. rezy
    November 6th, 2016

    can someone provide me the latest dumps?

    {email not allowed}
    Thanks in advance!!!!

  14. rezy
    November 6th, 2016

    can someone provide me the latest dumps?
    rezy_f at t-online.de
    Thanks in advance!!!!

  15. CCNP
    November 12th, 2016

    Hi
    referring to end of the q1 and q2. I thing the packet forwarding it not the job of the NAT this is routing process job “static or dynamic” whatever the roting process decision is the NAT process will translate the result. I mean the NAT translation job comes after the routing process function

  16. CCNP
    November 12th, 2016

    or in this case why not using the pool with PAD as we did with the dynamic NAT

  17. 300-101 Grades4sure
    November 14th, 2016

    Everything you require to get ready and quickly pass the tough Cisco Certified Design Professional 300-101exam with 100% pass guarantee in first attempt. http://www.grades4sure.com/300-101-exam-questions.html

  18. Nina
    November 17th, 2016

    Hey guys, I just wrote now in USA. I Passed 300-101 with 94%. This dumps http://www.testmayor.com/300-101-test.html is valid but a few answers are wrong. Although I don’t expect to pass with a full score, right? If your aim is just to pass the exam, only by memorizing the dumps is enough. But if you want to master skills, you really need to practice more.

  19. Akpofure
    November 17th, 2016

    I have passed the Route exam using the ebay link mentioned below. Contained all the new questions from the recent update. There’s a totaol of 206 with the new update (149 + 57). Many thanks to allah and this helpful community.

    The following is information to the Exam:

    44 Questions (This includes Multiple Choice,Drag and Drop, and Simlets)
    EIGRP Stub Simulation
    Redistribution Simulation
    IPv6 OSPF Simulation

    Information here is good as well, as mentioned by others. But here is the ebay link to be more convenient for you, instead of digging through the pages if you would like to use:

    http://www.ebay.com/itm/322309862094?

    Good Luck to you all. Many Blessings

  20. Anonymous
    December 2nd, 2016

    router(config)# ip nat inside source static tcp 172.16.10.8 8080 172.16.10.8 80
    Which statement about the command is true?????????

  21. Bad
    December 5th, 2016

    Hello It’s totally a different exam and the questions provided above is provided on the exam.
    and Anonymous i faced the same question today that which is not provided in any dumps questions.

  22. Arlo
    December 8th, 2016

    Download 300-101 study material from Dumps4Download site
    http://www.dumps4download.com/300-101-dumps.html

  23. The Grinch
    December 12th, 2016

    Finally passed the Route! Was a long journey… As I got caught in the update. However came across the ebay dump mentioned by others and passed the exam yesterday. The materials are still vailid. Like how he has packet tracer available for 3 of the simulations. It was good practice. No new questions.

    The link below is the ebay matierlas I have utilized, if you would like to use as well:

    http://www.ebay.com/itm/-/322352636952?

    Cheers and Happy Holidays!

  24. Aussie
    December 14th, 2016

    @digitaltut how can one get the questions to these answeres?

  25. dash
    December 18th, 2016

    Please send me latest dump to darshendash @gmail . com

  26. Anonymous
    December 21st, 2016

    refer tot he following command router(config)#ip nat inside source static tcp 172.16.10.8 8080 172.16.1.8 80
    on this command is the 172.16.10.8 8080 going to be translated to 172.16.1.8 80 or vise versa

  27. MaxZero
    December 27th, 2016

    @Anonymous:

    This answer in the TAGWA – TAGELSIR DUMPS is WRONG.

    please have a look at this document:
    http://www.cisco.com/c/en/us/support/docs/ip/network-address-translation-nat/13772-12.pdf

    Any packet received in the inside interface with a source address of 172.16.10.8:8080 is translated to 172.16.10.8:80.
    This also implies that any packet received on the outside interface with a destination address of
    172.16.10.8:80 has the destination translated to 172.16.10.8:8080.

    So the answer is B.
    Make sure you understand the whole concept of NAT port redirection and do not just focus on memorizing the answer, as things may differ in the exam, e.g. they can replace ‘inside’ with ‘outside’ and the answer will then be different.

  28. Anonymous
    January 4th, 2017

    thank you Max

  29. Lorry
    January 10th, 2017

    Passed the CCNP Route Exam! The ebay seller is legit for sure. No new questions. Good Luck!

    Oh yeah, he also updated his item. Not sure if you can get to the current one from the previous link but here is the updated link:

    http://www.ebay.com/itm/322384451339?

    Many blessings!

  30. dfdfds
    January 25th, 2017

    sfdsfdsfdsffffffffff

  31. Anonymous
    January 25th, 2017

    exam has been update 10 or 5 new Q

  32. Anonymous
    February 1st, 2017

    Is the 183q worth looking at, or stick to TAGWA and 149q????

  33. Anonymous
    February 2nd, 2017

    Anonymous i took a look at the 183 and now i’m confused buddy

  34. Anonymous
    February 10th, 2017

    Someone please explain this to me. In the 32q set of questions, they show this command:

    ip nat inside source static tcp 172.16.10.8 8080 172.16.10.8 80

    The answer is “Any packet received in the inside interface with a source IP port address of 172.16.10.8:8080 is translated to 172.16.10.8:80”

    The other answer is almost identical, but it leaves a space between the IP and port#:

    “Any packet received in the inside interface with a source IP port address of 172.16.10.8 8080 is translated to 172.16.10.8 80”

    Why aren’t both technically correct? Why is the first answer correct and the other not correct???

  1. No trackbacks yet.