Home > Ticket 4 – NAT ACL

Ticket 4 – NAT ACL

May 3rd, 2018 in TSHOOT v2 Go to comments

Comments (14) Comments
Comment pages
1 6 7 8 28
  1. blá
    January 17th, 2019

    Problem is the NAT ACL:

    ip access-list standard Nat_Traffic
    permit 10.1.0.0 0.0.255.255
    permit 192.168.1.128 0.0.0.31

    Missing
    permit 10.2.0.0 0.0.255.255

  2. Anonymous
    January 20th, 2019

    To solve this…i used following steps.
    1.Ping from R1 to Public IP
    2. Ping from R1 to Client 1

    If both works , check the ACL.

    Added the 10.2.0.0 0.0.255.255 in the Nat ACL.

  3. Anonymous
    January 21st, 2019

    R1
    IP NAT
    add 10.2.0.0

  4. potato
    January 22nd, 2019

    Hi,

    Sat the exam last week one of the tickets had R1s bgp interface (outside) and ospf interface (inside) configured with ip nat outside.

  5. Dany1
    February 18th, 2019

    One way to choose between BGP issue and NAT issue, observed by me at GNS3
    1. BGP Issue, that no route about 209.65.200.241 in R1 RIB.
    If you ping 209.65.200.241 from Switch or Router, message should be
    “Sending 5, 100-byte ICMP Echos to 209.65.200.241, timeout is 2 seconds:
    UUUUU

    That is sure, because from my VPCS which i simulate PC in GNS3, message is even simpler and intuitive “(ICMP type:3, code:1, Destination host unreachable)”
    2. NAT issue (or other staff, but clearly not route missing in RIB) the message is like that
    “Sending 5, 100-byte ICMP Echos to 209.65.200.241, timeout is 2 seconds:
    …..
    Success rate is 0 percent (0/5”
    According to docs, that means:
    Each period indicates the network server timed out while waiting for a reply.
    I hope it’s help.

  6. pak
    February 23rd, 2019

    Not able to get into configuration mode (config t) on practice tickets ….Please someone advise

  7. Dany 1
    February 24th, 2019

    For Pak: if you want to enter in config mode in simulator, you cannot. The same as in exam.
    THat is the idea to check your knowledge and only way is to choose Equipment. At which level is issue and what is(are) commands to solve that problem.
    If you want to have a configurable simulator,create yourself in GNS3, for example.
    You can run show running-config on each router, switch from tickets simulators. Is also very advisable to learn those three configuration.

  8. Anonymous
    March 17th, 2019

    @networktut

    in your ticket sim

    ping 209.65.200.241 – not reacheable
    trace 209.65.200.241 – shows hops and finally gets to the IP

    how come?

  9. Anonymous
    March 17th, 2019

    @networktut

    in your ticket sim

    from DSW1

    ping 209.65.200.241 – not reacheable
    trace 209.65.200.241 – shows hops and finally gets to the IP

    how come?

  10. Still confused
    March 20th, 2019

    Obviously it seems like an ACL issue since the 10.2.x.x subnet is not explicitly permitted in the NAT ACL. But if R1s local interface is configured as NAT outside or R1s internet facing port is configured as NAT inside, the NAT translations won’t be performed correctly and still will have no connectivity. Still unsure of the correct answer here.

  11. CCNPMAN
    March 31st, 2019

    Agreed about the missing ACL rule being the issue here.
    S0/0/1 is ip NAT outside while the subinterface S0/0/0.12 is identified as nat inside. Translations occur after permitting 10.2.0.0/16 in the NAT ACL.

  12. mabangis
    May 29th, 2019

    i just passed the exam in SG, got a 1000/1000.
    Not sure if there was a new EIGRP ticket. But based from my observation, Client unable to ping server 209.65.200.241 but DSW1 was able to ping 209.65.200.241. If you do a source ping on DSW1 from the ip address of the client, it will fail. Its the IP NAT inside on the WAN interface of R1. Deleted IP NAT inside and chose IP NAT outside. All MCQ questions from April are still valid. Just follow SAMs technique and you will pass the exam. Purchase the premium account here in networktut as it is worth it. Ill see you Cisco after 3 years. Thank you so much for all the post here.

  13. taco salad
    May 30th, 2019

    So is the adding of the network in the NAT ACL not in the exam? It’s just correcting ip nat outside on the ISP facing serial interface? or are both options possible to see?

  14. Clara
    June 13th, 2019

    I got it. It is the NAT_traffic ACL not the access list 30.

Comment pages
1 6 7 8 28