Static NAT creates a permanent one-to-one mapping between an inside private IP and an outside public IP. Used when an internal server needs to be reachable from the outside on a specific external address (web server, mail server, VPN endpoint). The mapping is bidirectional - traffic in either direction translates the same way. This lab configures static NAT on R2 to make 10.20.0.100 reachable as 192.0.2.100 from the outside.
What you will learn
- The static NAT command syntax:
ip nat inside source static INSIDE OUTSIDE - The role of
ip nat insideandip nat outsideon interfaces - How to read
show ip nat translations - How to read
show ip nat statisticsfor the bigger picture
What this lab does NOT cover
- Dynamic NAT (next lab, ips-04)
- NAT overload / PAT (lab ips-05)
- Twice NAT and outside-source translation
Topology
Download the CCNA Base Topology .yaml
3 iol-xe routers + 1 alpine + 1 ioll2-xe managed switch + 1 unmanaged switch. The reusable foundation for the PingLabz CCNA Labs library.
R2 is the NAT device. Et0/0 (LAN side) is inside; Et0/1 (P2P to R3) is outside.