Article

avatar

GNS3-Topology: ACL Test Lab for ACLs and NAT/PAT

Written by LBSources from http://www.gns3-labs.com on October 15th, 2009 | 14 Comments

“Hello World!’ – Hey so it’s been while since posting last and some things are getting back to normal since the move. One of them is my office :) Very happy about that! One thing that has not gotten back to normal is routine studying – I’m so far behind from my goal – but I do have 2 months before the year is out to complete the BSCI – Don’t know if I can do it though. I’m just not in the zone. Well anyway, here is a lab I’ve been meaning to put together to share with you all. It’s a lab involving NAT/PAT and Overload .. Sean shares this with us.

I setup this lab up to help me better understand ACLs (Standard, Extended, Dynamic, and Reflexive) and NAT’ing (e.g. Overload, Dynamic, and Static).

The IOS used is a 3640 version 12.4. The special topic about this lab is I did this on a Mac Book Pro and used the TAP/TUN drivers to attach my MBP into the simulation. So this config requires that GNS3 be run as root (e.g. sudo) in order to allow the TAP device to be created. Information on the TAP/TUN drivers for OS X can be found here:

Sean

Thanks for the lab dude! You too can share labs – You can either create a post here on the site with your lab and send all files necessary to the lab to postmy AT gns3-labs.com. You can also skip posting it and just send all files necessary to the lab to postmy AT gns3-labs.com. Thanks to all the help from contributors like Sean – you call help keep this site going!

Routers Used: 3640

IOS: c3640-ik9o3s-mz.124-25b

Feature of Topology: Static NAT, Dynamic NAT, Overload NAT, Network Address Translation (NAT), Port Address Translation (PAT), Access Control Lists


Image:

Download: GNS3-Labs-ACL Test Lab for ACLs and NAT-PAT By Sean

Cheers!

LB

23,455 views

Tags: , , , , , , , ,

14 Responses to “GNS3-Topology: ACL Test Lab for ACLs and NAT/PAT”

  1. avatar zouhair

    hello,
    could you please share a simple tpology (4 routers max) where nat overload is implemented and working. I have tried it on several router platforms, it just doesn’t work.
    exemple:
    R1——R2——-R3——–R4

    nat is implemented on R2
    eigrp is emplemented on R3,R2,R4 and the network linking R1 and R2 is not advertised. default route on R1 (pointing towards R1)and R2 (pointing towards R3)
    when I try to ping R3 from R1: nothing
    when I use an extended ping from R2 with ping source as the interface facing R1, the access-list is hit, ping to R4 is successful ,and i can see nat translations and statistics.
    I am not asking how to configure NAT, the question is: is nat supported on GNS3. static NAT works fine

  2. avatar TAS

    Good Post! Have you also tested ASA on Qemu particularly latest code v8.2 ?

  3. avatar Ricardo

    Will this ACL / NAT work on GNS3 on windows?

  4. avatar Steve

    NAT Overload is working fine on GNS3. I justed tested your topology using 2961 models.

    R2#sh ip nat translations
    Pro Inside global Inside local Outside local Outside global
    icmp 192.168.0.2:1 10.0.0.2:1 172.16.0.1:1 172.16.0.1:1
    icmp 192.168.0.2:5 10.0.1.2:5 172.16.0.1:5 172.16.0.1:5
    R2#

    I even added an Loopback int on R1 to be sure (that’s the 172.16.0.1).
    So my setup is:

    R1 Lo0: 172.16.0.1/24
    R1 Fa0/0: 192.168.0.1/24

    R2 Fa0/0: 192.168.0.2/24 (ip nat outside)
    R2 Fa0/1: 10.0.0.1/24 (ip nat inside)
    ACL: extended acl_nat permit ip 10.0.0.0 0.0.255.255 any
    NAT: ip nat inside source list acl_nat interface fa0/0 overload

    R3 Fa0/1: 10.0.0.2/24
    R3 Fa0/0: 10.0.1.1/24

    R4 Fa0/0: 10.0.1.2/24

    Configured EIGRP on R2,R3 and R4 with network 10.0.0.0
    R2: ip route 0.0.0.0 0.0.0.0 192.168.0.1
    R2: ip default-network 192.168.0.0

    Btw … something sounds strange in your description: “default route on R1 (pointing towards R1)and R2 (pointing towards R3)”

    Imho your problem is there.

  5. avatar Steve

    hmm .. forgot to mention …

    My message was addressed to zouhair

  6. avatar zouhair

    hello dear , if the nat is implemented in the R2 , R3 can’t ping R1 because
    R1 is internal – has local inside ip address – so the R1 is invisble for external users , users in the internet network see only the global outside address ( address of interface R2 , nat overload ) , but internal users can ping external users .

    R1–eigrp—R2(nat overload with this ip address)—–(R3–’internet’—R4)

    before implementing the nat , must be a communication between all routers in the network .

  7. avatar Tyson F. Gautreaux

    My programmer is trying to persuade me to move to .net from PHP. I have always disliked the idea because of the expenses. But he’s tryiong none the less. I’ve been using WordPress on numerous websites for about a year and am anxious about switching to another platform. I have heard excellent things about blogengine.net. Is there a way I can transfer all my wordpress posts into it? Any help would be greatly appreciated!

  8. avatar Latia Eblen

    some truly choice blog posts on this site, saved to favorites .

  9. avatar idrees

    wats the console password

  10. avatar Arlinda Sotos

    The Apple MacBook Pro MC724LL/A is a single of the most current computers that have been released by Apple, a single of the very best-identified companies of personal computers and other electronic communication gadgets. In basic, extremely few points certainly make this personal computer any other diverse from the relaxation of the MacBook Pro series of personal computers that have been in the sector in the recent previous. Even so, there has been an addition in that the Apple MacBook Pro MC724LL/A attributes a Sandy Bridge processor and the reality that it has the power to transfer info at a whopping speed of 10GBps. Check out the MACBOOK WIKI

  11. avatar Drusilla Goldberg

    I gotta favorite this website it seems extremely helpful extremely helpful

  12. avatar Joel Zagorski

    Anxiously looking on everywhere you go about information regarding this particular. Many thanks plenty.

  13. avatar John Graham

    Thanks for this lab. There are a good mix of challenges that makes it more interesting than a straightforward situation covering just one particular technology. There were however a number of typographical errors that caused me some confusion (mainly addresses entered incorrectly), and some of the instructions could possibly have been a bit clearer. All in all a great contribution though. Many thanks for your time!

  14. avatar free essay

    Brilliant write-up. Your blog page is very useful and I actually wish you had a contribute link, I would probably send you some dollars.

Leave a Reply



Subscribe To GNS3-Labs

Subscribe to GNS3 Labs :: Cisco Router Simulator Network Topologies


Show Love!

If you would like to donate for the time it takes to do all of this, feel free to use the link below. Thank you in advance for any contribution you make :)

Categories