Traditional NAT Dynamic Configuration describes how to configure traditional NAT for a dynamic configuration.
Step | Task | Command(s) |
---|---|---|
1 | Enable NAT, in interface configuration mode, on both the inside and outside interfaces. | ip | ipv6 nat {inside | outside} |
|
Define, in global configuration mode, an IPv4 or IPv6 access-list of permits for all inside addresses to be used by this dynamic translation. | ip | ipv6 access-list list-number {deny | permit} source |
|
Define, in global configuration mode, a NAT address pool for all IPv4 or IPv6 outside addresses to be used by this dynamic translation. | ip nat pool name start-ip-address end-ip-address [netmask netmask | prefix-length prefix-length] ipv6 nat pool name start-ip-address/prefix-length count count |
2 | Enable, in global configuration mode, dynamic translation of inside source addresses. Specify the overload option for NAPT translations. Do not specify a pool when configuring a dynamic NAT firewall list rule. | ip | ipv6 nat inside source list access-list [pool pool-name] [interface interface-name] [overloaded] [inside-vrf vrf-name] [fullcone acl | restricted-cone acl | port-restricted-cone acl] |