Question 821 - 350-401 discussion

Option C is the correct set of commands to complete the configuration of NAT on R1.The configuration steps are as follows12:

Define the inside and outside interfaces for NAT using theip nat insideandip nat outsidecommands. In this case, the inside interface is GigabitEthernet0/0 and the outside interface is GigabitEthernet0/1:interface GigabitEthernet0/0andip nat inside,interface GigabitEthernet0/1andip nat outside.

Configure a static NAT entry that maps the inside local address 192.168.10.17 to the inside global address 192.168.27.42 using theip nat inside source staticcommand:ip nat inside source static 192.168.10.17 192.168.27.42.

Verify the NAT configuration using theshow ip nat translationsandshow ip nat statisticscommands:show ip nat translationsandshow ip nat statistics.

Option A is incorrect because it does not define the inside and outside interfaces for NAT, which is required for NAT to function properly1.

Option B is incorrect because it uses theip nat outside source staticcommand, which is used to translate the source address of packets that travel from outside to inside, and the destination address of packets that travel from inside to outside.This is not the desired behavior for this scenario, where the inside local address 192.168.10.17 should be translated to the inside global address 192.168.27.42 in both directions1.

Option D is incorrect because it uses theip nat poolandip nat inside source listcommands, which are used to configure dynamic NAT or PAT, not static NAT. These commands create a pool of inside global addresses and an access list to define which inside local addresses are eligible for translation.However, in this scenario, there is only one inside local address and one inside global address, so a static NAT entry is sufficient1.Reference:1:Configure Network Address Translation,2:Static NAT