One NAT question...

johnifanx98johnifanx98 Member Posts: 329
1.1.128.1
1.1.129.23
1.1.130.1
1.1.135.45

The above is the inside global addresses. If I will create a pool. What is the prefix length?

My answer is this: ip nat pool global-pool 1.1.128.1 1.1.135.254 prefix-length 21

Am I right?

Comments

  • networker050184networker050184 Mod Posts: 11,962 Mod
    The prefix-length there really does not matter much unless you include the network and broadcast addresses within the pool range.
    An expert is a man who has made all the mistakes which can be made.
  • johnifanx98johnifanx98 Member Posts: 329
    Interesting?! I never see network/broadcast added in the pool when using netmask. So, prefix-length is different regarding this?
  • networker050184networker050184 Mod Posts: 11,962 Mod
    The mask doesn't really matter for NAT if you think about it. What the prefix-length/netmask is there for is to keep network and broadcast addresses from being assigned out of the pool. If you just leave the netmask and broadcast out the mask is mostly irrelevant unless you use a shorter mask and accidently limit your legit assignments.
    An expert is a man who has made all the mistakes which can be made.
  • johnifanx98johnifanx98 Member Posts: 329
    I don't think your answer is relevant with my question. I'm simply confirming a prefix-length...
  • networker050184networker050184 Mod Posts: 11,962 Mod
    It is relevant to your question. How are you going to assign a proper prefix-length if you don't know what the implications of this prefix-length is? You could use a prefix-length of /8 if you wanted to and still get the same result. The devil is in the details my friend.
    An expert is a man who has made all the mistakes which can be made.
  • TurK-FXTurK-FX Member Posts: 174
    1.1.128.1
    1.1.129.23
    1.1.130.1
    1.1.135.45

    The above is the inside global addresses. If I will create a pool. What is the prefix length?

    My answer is this: ip nat pool global-pool 1.1.128.1 1.1.135.254 prefix-length 21

    Am I right?

    Yo put all those IP addresses in same subnet,, you need a subnet that supports minimum 1830 hosts. So yes, you need prefix lenght 21 or lower.
    if you do /21, 1.1.128.1 thru 1.1.135.254 will be in same subnet.
    WGU classes: Transferred -> AGC1, CLC1, TBP1, CJC1, BVC1, C278, CRV1, IWC1, IWT1, C246, C247, C132, C164, INC1, C277. Appealed -> WFV1 and C393.
    What is Left to take - > EUP1, EUC1, C220, C221, BNC1, GC1, C299, CTV1, DJV1, DHV1, CUV1, CJV1, TPV1, C394
    Currently Studying -> CCNA security (Designing Customized Security & Security)
Sign In or Register to comment.