Command:

ip nat


Mode:

Router(config-if)#

Syntax:

ip nat {inside | outside}

no ip nat {inside | outside}


Syntax Description:

inside

Indicates the interface is connected to the inside network (the network subject to NAT translation).

outside

Indicates the interface is connected to the outside network.


Command Description:

To designate that traffic originating from or destined for the interface is subject to Network Address Translation (NAT), use the ip nat interface configuration command. To prevent the interface from being able to translate, use the no form of this command.

Only packets moving between "inside" and "outside" interfaces can be translated. You must specify at least one inside interface and one outside interface for each border router where you intend to use NAT.


Example:

The following example translates between inside hosts addressed from either the 192.168.1.0 or 192.168.2.0 networks to the globally unique 171.69.233.208/28 network:

ip nat pool net-208 171.69.233.208 171.69.233.223 prefix-length 28
ip nat inside source list 1 pool net-208
!
interface fastethernet 0/0
 ip address 171.69.232.182 255.255.255.240
 ip nat outside
!
interface fastethernet 0/1
 ip address 192.168.1.94 255.255.255.0
 ip nat inside
!
access-list 1 permit 192.168.1.0 0.0.0.255
access-list 1 permit 192.168.2.0 0.0.0.255

Misconceptions:
None

Related Commands:
clear ip nat translation
ip nat inside destination
ip nat inside source
ip nat pool
ip nat translation
show ip nat statistics
show ip nat translations

� Cisco Systems, Inc. 2001, 2002, 2003
World Wide Education

Converted from CHM to HTML with chm2web Pro 2.85 (unicode)