GNS3-Topology: ACL Test Lab for ACLs and NAT/PAT
Written by LBSources from http://www.gns3-labs.com on October 15th, 2009 | 14 Comments“Hello World!’ – Hey so it’s been while since posting last and some things are getting back to normal since the move. One of them is my office
Very happy about that! One thing that has not gotten back to normal is routine studying – I’m so far behind from my goal – but I do have 2 months before the year is out to complete the BSCI – Don’t know if I can do it though. I’m just not in the zone. Well anyway, here is a lab I’ve been meaning to put together to share with you all. It’s a lab involving NAT/PAT and Overload .. Sean shares this with us.
I setup this lab up to help me better understand ACLs (Standard, Extended, Dynamic, and Reflexive) and NAT’ing (e.g. Overload, Dynamic, and Static).
The IOS used is a 3640 version 12.4. The special topic about this lab is I did this on a Mac Book Pro and used the TAP/TUN drivers to attach my MBP into the simulation. So this config requires that GNS3 be run as root (e.g. sudo) in order to allow the TAP device to be created. Information on the TAP/TUN drivers for OS X can be found here:
Sean
Thanks for the lab dude! You too can share labs – You can either create a post here on the site with your lab and send all files necessary to the lab to postmy AT gns3-labs.com. You can also skip posting it and just send all files necessary to the lab to postmy AT gns3-labs.com. Thanks to all the help from contributors like Sean – you call help keep this site going!
Routers Used: 3640
IOS: c3640-ik9o3s-mz.124-25b
Feature of Topology: Static NAT, Dynamic NAT, Overload NAT, Network Address Translation (NAT), Port Address Translation (PAT), Access Control Lists
Download: GNS3-Labs-ACL Test Lab for ACLs and NAT-PAT By Sean
Cheers!
LB
23,455 viewsTags: 3640, Access Control List, Dynamic NAT, GNS3 Topology, Network Address Translation, Overload NAT, PAT, Port Address Translation, Static NAT










October 16th, 2009 at 5:04 am
hello,
could you please share a simple tpology (4 routers max) where nat overload is implemented and working. I have tried it on several router platforms, it just doesn’t work.
exemple:
R1——R2——-R3——–R4
nat is implemented on R2
eigrp is emplemented on R3,R2,R4 and the network linking R1 and R2 is not advertised. default route on R1 (pointing towards R1)and R2 (pointing towards R3)
when I try to ping R3 from R1: nothing
when I use an extended ping from R2 with ping source as the interface facing R1, the access-list is hit, ping to R4 is successful ,and i can see nat translations and statistics.
I am not asking how to configure NAT, the question is: is nat supported on GNS3. static NAT works fine
November 2nd, 2009 at 6:48 am
Good Post! Have you also tested ASA on Qemu particularly latest code v8.2 ?
March 15th, 2010 at 10:55 am
Will this ACL / NAT work on GNS3 on windows?
March 16th, 2010 at 7:16 pm
NAT Overload is working fine on GNS3. I justed tested your topology using 2961 models.
R2#sh ip nat translations
Pro Inside global Inside local Outside local Outside global
icmp 192.168.0.2:1 10.0.0.2:1 172.16.0.1:1 172.16.0.1:1
icmp 192.168.0.2:5 10.0.1.2:5 172.16.0.1:5 172.16.0.1:5
R2#
I even added an Loopback int on R1 to be sure (that’s the 172.16.0.1).
So my setup is:
R1 Lo0: 172.16.0.1/24
R1 Fa0/0: 192.168.0.1/24
R2 Fa0/0: 192.168.0.2/24 (ip nat outside)
R2 Fa0/1: 10.0.0.1/24 (ip nat inside)
ACL: extended acl_nat permit ip 10.0.0.0 0.0.255.255 any
NAT: ip nat inside source list acl_nat interface fa0/0 overload
R3 Fa0/1: 10.0.0.2/24
R3 Fa0/0: 10.0.1.1/24
R4 Fa0/0: 10.0.1.2/24
Configured EIGRP on R2,R3 and R4 with network 10.0.0.0
R2: ip route 0.0.0.0 0.0.0.0 192.168.0.1
R2: ip default-network 192.168.0.0
Btw … something sounds strange in your description: “default route on R1 (pointing towards R1)and R2 (pointing towards R3)”
Imho your problem is there.
March 16th, 2010 at 7:18 pm
hmm .. forgot to mention …
My message was addressed to zouhair
September 28th, 2010 at 4:27 am
hello dear , if the nat is implemented in the R2 , R3 can’t ping R1 because
R1 is internal – has local inside ip address – so the R1 is invisble for external users , users in the internet network see only the global outside address ( address of interface R2 , nat overload ) , but internal users can ping external users .
R1–eigrp—R2(nat overload with this ip address)—–(R3–’internet’—R4)
before implementing the nat , must be a communication between all routers in the network .
January 12th, 2011 at 11:45 am
My programmer is trying to persuade me to move to .net from PHP. I have always disliked the idea because of the expenses. But he’s tryiong none the less. I’ve been using WordPress on numerous websites for about a year and am anxious about switching to another platform. I have heard excellent things about blogengine.net. Is there a way I can transfer all my wordpress posts into it? Any help would be greatly appreciated!
April 21st, 2011 at 9:25 am
some truly choice blog posts on this site, saved to favorites .
May 11th, 2011 at 2:54 pm
wats the console password
May 16th, 2011 at 11:11 am
The Apple MacBook Pro MC724LL/A is a single of the most current computers that have been released by Apple, a single of the very best-identified companies of personal computers and other electronic communication gadgets. In basic, extremely few points certainly make this personal computer any other diverse from the relaxation of the MacBook Pro series of personal computers that have been in the sector in the recent previous. Even so, there has been an addition in that the Apple MacBook Pro MC724LL/A attributes a Sandy Bridge processor and the reality that it has the power to transfer info at a whopping speed of 10GBps. Check out the MACBOOK WIKI
July 23rd, 2011 at 8:35 pm
I gotta favorite this website it seems extremely helpful extremely helpful
September 3rd, 2011 at 1:44 am
Anxiously looking on everywhere you go about information regarding this particular. Many thanks plenty.
November 6th, 2011 at 10:38 pm
Thanks for this lab. There are a good mix of challenges that makes it more interesting than a straightforward situation covering just one particular technology. There were however a number of typographical errors that caused me some confusion (mainly addresses entered incorrectly), and some of the instructions could possibly have been a bit clearer. All in all a great contribution though. Many thanks for your time!
November 28th, 2011 at 10:59 pm
Brilliant write-up. Your blog page is very useful and I actually wish you had a contribute link, I would probably send you some dollars.