How to Configure NAT (Network Address Translation) on Cisco Routers

Configuring Network Address Translation (NAT) on a Cisco router allows private IP addresses within your local network to access resources on the internet using a single public IP address. Here’s a step-by-step guide to configure NAT on a Cisco router:

1. Access the Command Line Interface (CLI):
   Connect to your Cisco router via console cable or SSH.
2. Enter Privileged Exec Mode:
   Once connected, enter privileged exec mode by typing:

   enable

Provide the enable password if required.

3. Enter Global Configuration Mode:
   To configure NAT, enter global configuration mode:

   configure terminal

This command allows you to make changes to the router’s settings.

4. Configure NAT Inside and Outside Interfaces:
   Define which interfaces are considered “inside” (private network) and “outside” (public network) for NAT:

   interface <interface_type> <interface_number>
   ip nat inside

   interface <interface_type> <interface_number>
   ip nat outside

Replace and with the appropriate values.

5. Create an Access Control List (ACL) for NAT:
   You’ll need an ACL to specify which traffic should be translated. Create a standard ACL to define the private IP addresses:

   access-list <acl_number> permit <source> <wildcard>

For example:

   access-list 10 permit 192.168.0.0 0.0.0.255

This allows traffic from the 192.168.0.0/24 network.

6. Configure NAT Overload (PAT):
   Use the following command to enable NAT overload, which allows multiple private IP addresses to share a single public IP:

   ip nat inside source list <acl_number> interface <interface_type> <interface_number> overload

Replace , , and with the appropriate values.

For example:

   ip nat inside source list 10 interface GigabitEthernet0/0 overload

7. Save the Configuration:
   After configuring NAT, save the configuration:

   write memory

or

   copy running-config startup-config

This ensures that your NAT settings persist after a reboot.

8. Verify the Configuration:
   Use the following command to verify the NAT configuration:

   show ip nat translations

This command displays the current NAT translations.

9. Test Connectivity:
   Test connectivity from devices in your private network to resources on the internet to ensure that NAT is functioning correctly.

Remember to adapt the commands to your specific network setup and requirements. NAT is a crucial component for allowing private networks to access resources on the internet, and it helps conserve public IP addresses. Always be cautious when making changes to a network device’s configuration, especially if it’s in a production environment.