Lab 15: NAT and PAT Sequential Labs from boson

Lab 15: NAT and PAT Sequential Labs from netsim for ccnp boson 7
I can't get it ping from router1 to router3 or telnet from router2 to router3, why?

cheers,
Kevin.

ping from router 3 to router 1
router3#sh ip route
Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area
E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP
i - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * - candidate default
U - per-user static route

Gateway of last resort is not set

175.10.0.0/24 is subnetted, 1 subnets
C 175.10.1.0 is directly connected, Serial0
180.10.0.0/24 is subnetted, 1 subnets
C 180.10.1.0 is directly connected, Serial1
C 197.10.1.0 is directly connected, Ethernet0
O 195.10.1.0 [110/128] via 180.10.1.2, 01:17:57, Serial1
160.10.0.0/24 is subnetted, 1 subnets
O 160.10.1.0 [110/74] via 175.10.1.1, 01:17:47, Serial0

router3#ping 175.10.1.1

Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 175.10.1.1, timeout is 2 seconds:
.....
Success rate is 0 percent (0/5), round-trip min/avg/max = 1/2/4 ms

router3#show cdp neighbor detail

Device ID: router1
Entry address(es):
IP address: 175.10.1.1
Platform: Boson 2503 , Capabilities: Router
Interface: Ser0, Port ID (outgoing port): Ser 0
Holdtime: 176 sec

router3#show int
Serial0 is up, line protocol is up
Hardware is HD64570
Internet address is 175.10.1.2/24
MTU 1500 bytes, BW 1544 Kbit, DLY 2000 usec, rely 255/255, load 1/255
Encapsulation HDLC, loopback not set, keepalive set (10 sec)
Last input 00:00:00, output 00:00:00, output hang never
Last clearing of "show interface" counters never
Queuing strategy: weighted-fair
Output queue: 0/1000/64/0 (size/max total/threshold/drops)
Conversations 7/35/128 (active/max active/max total)
Reserved Conversations 0/0 (allocated/max allocated)
Available Bandwidth 1158 kilobits/sec
5 minute input rate 1000 bits/sec, 2 packets/sec
5 minute output rate 1000 bits/sec, 2 packets/sec
0 packets input, 00 bytes, 0 no buffer
Received 0 broadcasts, 0 runts, 0 giants, 0 throttles
0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort
0 input packets with dribble condition detected
0 packets output, 00 bytes, 0 underruns
0 output errors, 0 collisions, 0 interface resets
0 babbles, 0 late collision, 0 deferred
0 lost carrier, 0 no carrier
0 output buffer failures, 0 output buffers swapped out

router3#sh ip int
Serial0 is up, line protocol is up
Internet address is 175.10.1.2/24
Broadcast address is 255.255.255.0
MTU 1500 bytes,
Helper address is not set
Directed broadcast forwarding is disabled
Outgoing access list is not set
Inbound access list is not set
Proxy ARP Is Enabled
Security Level Is Default
Split horizon Is Enabled
ICMP redirects are always sent
ICMP unreachables are always sent
ICMP mask replies are never sent
IP fast switching is enabled
IP fast switching on the same interface is enabled
IP Null turbo vector
IP multicast fast switching is enabled
IP multicast distributed fast switching is disabled
router Discovery Is disabled
IP output packet accounting is disabled
IP access violation accounting is disabled
TCP/IP header compression is disabled
RTP/IP header compression is disabled
Probe proxy name replies are disabled
Policy routing Is disabled
Network address translation is disabled
WCCP Redirect outbound is disabled
WCCP Redirect exclude is disabled

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

KPWright

I ran into this exact problem with the ICND1 & ICND2 Bosun labs. You'll run into it in other places as well. The problem is that the only mechanism you have to prove connectivity from the simulated workstations is to ping. A ping doesn't get translated. So you end up having to take for granted that you got the configuration right. There are also quite a few configuration commands and options you'll find are not supported by the simuator as well.

The simulators are a bit frustrating sometimes, but I've found if you don't get too hung up on the details, you still end up getting a lot better at understanding and entering the configuration by using them. If you look through a lot of the earlier threads on the subject, this is common to all of the training lab specific simulators and Boson looks to be one of the better ones. There are some other options, but they take a lot more time, effort and money to set up.

Learn what you can and move on is the advice I've gotten. It seems a lot of folks are learning what they need and passing the exams despite the limited simulations, so you probably will too.

Cheers,

Kevin

networker050184

Try changing your source address when you ping.

Bl8ckr0uter

networker050184 wrote: »

Try changing your source address when you ping.

This is what I do. Also you can use sh ip nat trans to make sure it is working.

poguy

networker050184 wrote: »

Try changing your source address when you ping.

I change the interface for both local and remote, it doesn't work.
Any alternative?
Thank you for helping

Bl8ckr0uter

poguy wrote: »

I change the interface for both local and remote, it doesn't work.
Any alternative?
Thank you for helping

I think what he mean was this

Ping XXXX Source YYYYY

X= Destination Address
Y= Address of an interface on the local router

For an example say you had this set of code

access-list standard 1 permit 10.1.1.1 0 .0.0.255
Ip nat Pool KEVIN 67.76.67.1 67.76.67.1 netmask 255.255.255.0
Ip nat inside source list 1 pool KEVIN overload

Int f 0
ip address 10.1.1.1 255.255.255.0
ip nat inside

int s 0
ip address 67.76.67.1 255.255.255.0
ip nat outside

If you perfomed a ping like this:
ping 67.76.67.2 source 10.1.1.1

you should see output when you run this command:
sh ip nat trans

Bl8ckr0uter

I just thought of another way for you to test you natting skills (and best thing is you only need one device). Use loopback ints for the inside and outside ints and just switch the source pings. When you do the sh ip nat trans command you will see translations (if you configure everything correctly). I just tried this (I think it is pretty great).

Oh well back to studying

Big day is tommorow

poguy

ping 67.76.67.2 source 10.1.1.1

do you mean ping from 10.1.1.1
because I don't have this command "ping 67.76.67.2 source 10.1.1.1"

Thank you

mikej412

poguy wrote: »

I don't have this command "ping 67.76.67.2 source 10.1.1.1"

Then that means you have an "older IOS" -- so just use the extended ping.

Type "ping" and hit the enter key. For the "source IP" option type the 10.1.1.1 there.