Home > Ticket 4 – NAT ACL

Ticket 4 – NAT ACL

May 3rd, 2018 in TSHOOT v2 Go to comments

Comments (14) Comments
Comment pages
1 6 7 8 28
  1. blá
    January 17th, 2019

    Problem is the NAT ACL:

    ip access-list standard Nat_Traffic


  2. Anonymous
    January 20th, 2019

    To solve this…i used following steps.
    1.Ping from R1 to Public IP
    2. Ping from R1 to Client 1

    If both works , check the ACL.

    Added the in the Nat ACL.

  3. Anonymous
    January 21st, 2019

    IP NAT

  4. potato
    January 22nd, 2019


    Sat the exam last week one of the tickets had R1s bgp interface (outside) and ospf interface (inside) configured with ip nat outside.

  5. Dany1
    February 18th, 2019

    One way to choose between BGP issue and NAT issue, observed by me at GNS3
    1. BGP Issue, that no route about in R1 RIB.
    If you ping from Switch or Router, message should be
    “Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:

    That is sure, because from my VPCS which i simulate PC in GNS3, message is even simpler and intuitive “(ICMP type:3, code:1, Destination host unreachable)”
    2. NAT issue (or other staff, but clearly not route missing in RIB) the message is like that
    “Sending 5, 100-byte ICMP Echos to, timeout is 2 seconds:
    Success rate is 0 percent (0/5”
    According to docs, that means:
    Each period indicates the network server timed out while waiting for a reply.
    I hope it’s help.

  6. pak
    February 23rd, 2019

    Not able to get into configuration mode (config t) on practice tickets ….Please someone advise

  7. Dany 1
    February 24th, 2019

    For Pak: if you want to enter in config mode in simulator, you cannot. The same as in exam.
    THat is the idea to check your knowledge and only way is to choose Equipment. At which level is issue and what is(are) commands to solve that problem.
    If you want to have a configurable simulator,create yourself in GNS3, for example.
    You can run show running-config on each router, switch from tickets simulators. Is also very advisable to learn those three configuration.

  8. Anonymous
    March 17th, 2019


    in your ticket sim

    ping – not reacheable
    trace – shows hops and finally gets to the IP

    how come?

  9. Anonymous
    March 17th, 2019


    in your ticket sim

    from DSW1

    ping – not reacheable
    trace – shows hops and finally gets to the IP

    how come?

  10. Still confused
    March 20th, 2019

    Obviously it seems like an ACL issue since the 10.2.x.x subnet is not explicitly permitted in the NAT ACL. But if R1s local interface is configured as NAT outside or R1s internet facing port is configured as NAT inside, the NAT translations won’t be performed correctly and still will have no connectivity. Still unsure of the correct answer here.

    March 31st, 2019

    Agreed about the missing ACL rule being the issue here.
    S0/0/1 is ip NAT outside while the subinterface S0/0/0.12 is identified as nat inside. Translations occur after permitting in the NAT ACL.

  12. mabangis
    May 29th, 2019

    i just passed the exam in SG, got a 1000/1000.
    Not sure if there was a new EIGRP ticket. But based from my observation, Client unable to ping server but DSW1 was able to ping If you do a source ping on DSW1 from the ip address of the client, it will fail. Its the IP NAT inside on the WAN interface of R1. Deleted IP NAT inside and chose IP NAT outside. All MCQ questions from April are still valid. Just follow SAMs technique and you will pass the exam. Purchase the premium account here in networktut as it is worth it. Ill see you Cisco after 3 years. Thank you so much for all the post here.

  13. taco salad
    May 30th, 2019

    So is the adding of the network in the NAT ACL not in the exam? It’s just correcting ip nat outside on the ISP facing serial interface? or are both options possible to see?

  14. Clara
    June 13th, 2019

    I got it. It is the NAT_traffic ACL not the access list 30.

Comment pages
1 6 7 8 28