Konfigurasi NAT

Posted by Belajar cisco untuk pemula on

Friday, May 20, 2016

Konfigurasi NAT

Task 1: Konfigurasi Static NAT

static NAT (router SBY):

10.1.1.11 à 202.1.2.3  (Public TFTP & FTP server)

Router-SBY:

(config)# int s0/1

(config-if)# ip address 202.1.2.2 255.255.255.0

(config-if)# exit 

(config)# no router eigrp 65000

(config)# ip route 0.0.0.0 0.0.0.0 10.1.2.1 

(config)# ip nat inside source static 10.1.1.11 202.1.2.3 

(config)# access-list 177 permit tcp any host 202.1.2.3 eq 80

(config)# int s0/1

(config-if)# ip access-group 177 in

(config-if)# ip nat outside 

(config-if)# int f0/0

(config-if)# ip nat inside

(config-if)# end 

# sh ip nat translation 

Task 2: Konfigurasi Dynamic PAT

Router-SBY:

(config)# access-list 7 permit 10.1.1.0 0.0.0.255

(config)# ip nat inside source list 7 int s0/1 overload

(config)# int s0/1

 (config-if)# ip nat outside 

(config-if)# int f0/0

(config-if)# ip nat inside

(config-if)# end 

# sh ip nat translation

# debug ip nat 

PC di LAN SBY (10.1.1.x):

C:> ping 202.1.4.2

C:> ping 203.100.15.1

C:> ping 152.118.25.1

C:> ping 66.24.35.77

Task 3: Menghapus Konfigurasi NAT & PAT

(config)# int s0/1

(config-if)# no ip nat outside 

(config)# int f0/0

(config-if)# no ip nat inside

(config-if)# exit 

(config)# no ip nat inside source static 10.1.1.11 202.1.2.3 

(config)# no ip nat inside source list 7 int s0/1 overload

(config)# no access-list 7

Task 4: Mengembalikan konfigurasi sebelum lab NAT/PAT

(config)# int serial 0/1

(config-if)# ip address 10.1.2.2 255.255.255.0

(config-if)# exit 

(config)# no ip route 0.0.0.0 0.0.0.0 

(config)# router eigrp 65000

(config-router)# network 10.0.0.0

(config-router)#end

# copy run start