Configuring Traditional NAT Dynamic Inside Address Translation

Traditional NAT Dynamic Configuration describes how to configure traditional NAT for a dynamic configuration.

Click to expand in new window

Traditional NAT Dynamic Configuration

Step Task Command(s)
1 Enable NAT, in interface configuration mode, on both the inside and outside interfaces. ip | ipv6 nat {inside | outside}
  1. 1.
Define, in global configuration mode, an IPv4 or IPv6 access-list of permits for all inside addresses to be used by this dynamic translation. ip | ipv6 access-list list-number {deny | permit} source
  1. 2.
Define, in global configuration mode, a NAT address pool for all IPv4 or IPv6 outside addresses to be used by this dynamic translation. ip nat pool name start-ip-address end-ip-address [netmask netmask | prefix-length prefix-length]

ipv6 nat pool name start-ip-address/prefix-length count count

2 Enable, in global configuration mode, dynamic translation of inside source addresses. Specify the overload option for NAPT translations. Do not specify a pool when configuring a dynamic NAT firewall list rule. ip | ipv6 nat inside source list access-list [pool pool-name] [interface interface-name] [overloaded] [inside-vrf vrf-name] [fullcone acl | restricted-cone acl | port-restricted-cone acl]