Lovely afternoon after work, in the sun and smashing this LAB! loved it and even got a laugh out of it. Cant wait to try the next one tomorrow. Cheers again Keith.
Great lab Keith, I was struggling because without a default gateway on the DNS/Web server i didn't get it to work. After troubleshooting i realized i had a mistake in my ACL. I used the wrong wildcard bits so NAT was not applied and the DNS/Web server did need to know where to send the data to. After i fixed the ACL it worked like a charm :)
I did it in a probably less "ideal" way by adding the 23.1.2.0 network in ospf, but it seems to have got the same result. Thanks Keith, these are definitely the best way to study IMO! Love your work as always.
Hi Keith thanks for all your labs love to stick to this series and do the lab with you, good job for keep it going. it is being informative for me and thank you for streaming :)
Thanks. I forgot about "default-information originate". I did the lab without first watching the video, but I was unsuccessfully using "redist static subnets".
Thank you for the question Alanazi. On this TH-cam channel, my primary focus will is Cisco CCNA. I appreciate the interest though. Happy studies to you!
Please I want to know if all the videos in this CCNA 200-301 playlist (about 61 of them) are the complete course and if it’s sufficient for me to sit for the exam or there are more topics to be covered?
I can't seem to get past "Server Reset Connection". I can ping the server, and I receive a reply, but I can't seem to load the website. when I do 'show ip nat translations', it shows that I am making udp requests to the server. I'm rather confused.
Your videos are amazing. Sir I have one doubt regarding NAT specifically Destination NAT. When we configuring destination NAT we'll configure one security policy also for allowing that particular traffic. So my doubt is this, we know that when a packet is arriving to ingress interface the firewall will check the security policy then only it will go for NAT. So in case of this destination NAT, in the NAT rule source and destination are in Outside zone. So which security policy will be inspected for that destination NAT rule. Is that default intra-zone rule or the policy which we're explicitly configuring ? I'm little bit confused there.🙂😀
Thank you Sreejith Jinachandran. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord Thanks again Sreejith Jinachandran!
Cool Dude 😍 when you have perimeter firewall then you would not require nat/pat enabled on edge router as firewall taking care of nat, correct? your topology, is it consisting of access switch, distribution & core switches or just access & core switches?
hmmm having trouble understanding this inside local and outside global stuff. i am trying to do a static one to one translation but its not working. i think i keep getting the ip address mix up can you share the command for static one to one translation?
I am concerning about two thing.. First, default gateway is 23.1.2.254 but there is no interface has this address. Without gateway how does the server send back..
Thank you for the question Stephen. On R1, if it has a default route, it can advertise a default route for the OSPF network with this: R1(config)#router ospf 1 R1(config-router)#default-information originate Cheers!
@@KeithBarker how do you know if it has a default route? Can you show me where in OSPF 1(on edge rtr) it says it has a default route? I'm trying to understand that part. Thanks,
with nat or pat the outside interface of the router must be configured with one of the pool addresses ? because i tried a lab with the outside interface that is one of the pool addressess and it works , but i tried to configure pat with an address that is not on the phisical interface and it didn't works (in both the cases i put the network in ospf to include it in the routing between the routers)
Thank you for the question Marko Haroon. If you use the "interface" and "overload" option, there is no pool involved. If you use a pool, it should be in the same subnet as the router outside interface. Normally we would exclude the router IP itself, along with any other already used IP addresses from that subnet, from being used with DHCP. I have an instructor hour each saturday at 10am pacific. Feel free to stop by and I can elaborate if you would like. ogit.online/Join_OGIT_on_Discord Happy studies.
@@KeithBarker thank you , by using "interface" insted of the pool everything worked immediately, and thank you also for clearify me that i have to use always a subnet of the outside interface addressess for the dynamic NAT, now i understood the concept
hey Keith, thanx a mil for labs . im having a issue with packet tracer , i cant see any icons in packet tracer once i download from ur lab , instead of icons it says file not found. could you pls help me ? thank you much appreciated 🙏
I am using 7.3 of packet tracer. If still having issues, you may want to re-install packet tracer, and download a fresh copy of the lab from TheKeithBarker.com Hope that is useful, and happy continued studies and labs!
Just right before configuring the nat. If we trace a ping to the server from PC1 in simulation mode, the packet goes to access1 switch to the MLS2 to the edge switch. Not as I assume, the packet then does not cross the edge switch to the edge router. instead, it goes only to the MLS1, and from there, it goes back to the edge switch and crosses it to the edge router. could anyone explain this behavior? why the ICMP packet doesn't cross the edge switch from the first time?
Not sure I follow that whole flow, but if there is an error in PT, just remember that it is a simulation tool, and not the emulated environment. That may account for some differences with what is shown in simulation mode.
@@KeithBarker Thank you for the reply. In fact, I figured it out. Because MLS1 and MLS2 are configured with HSRP. Thus, one of them is active and tied to the gateway IP. That is MLS1 as it has the highest priority per the configurations. MLS2 is inactive (standby) when it comes to being a gateway. I hope my findings are correct. Thanks again.
Amazing labs, I try to do one each day and try to do a work-through on my own with the objectives. Thanks, Keith, you are an amazing teacher.
Lovely afternoon after work, in the sun and smashing this LAB! loved it and even got a laugh out of it. Cant wait to try the next one tomorrow. Cheers again Keith.
Have fun!
Thanks Keith. Never a boring moment with your tutorials. You are simply awesome.
I appreciate that!
These labs are gold. Thank you!
Glad you like them!
Great lab Keith, I was struggling because without a default gateway on the DNS/Web server i didn't get it to work.
After troubleshooting i realized i had a mistake in my ACL. I used the wrong wildcard bits so NAT was not applied and the DNS/Web server did need to know where to send the data to.
After i fixed the ACL it worked like a charm :)
Way to go!
I did it in a probably less "ideal" way by adding the 23.1.2.0 network in ospf, but it seems to have got the same result. Thanks Keith, these are definitely the best way to study IMO! Love your work as always.
Nice work!
Thank you for your labs, keep going!
Thanks, will do!
Thank you Keith. You are amazing
Thanks for the lab. Loved the additional troubleshooting exercise. Makes us think harder.
You bet!
thank you very much keith for the labs you are the best
Thank you or itzhak!
Hi Keith thanks for all your labs love to stick to this series and do the lab with you, good job for keep it going.
it is being informative for me and thank you for streaming :)
Thank you נועם רמדי!
Thanks again Keith, just finished the lab.
Thank you Ryan Rothwell for working on that lab! Hands on practice is one of the best ways to build your skills, and get better. Thank you!
@@KeithBarker thank you for making the labs, your website downloads are great.
Every day you are proving your place as the OG of IT.
I just ran through the lab - Great Lab! Thank You.
Thank you Paul for working on that lab! (and for letting me know).
Happy continued success to you❗
oh my god keith .. I laughed out when i figured out the problem, it was a very good lab as always .. thanks and keep up the good work :) !!
Thank you Michael for working on that lab! Hands on practice is one of the best ways to build your skills, and get better. Thank you!
Done. Thank you Keith.
Thank you Edgardo
Thanks for the video.
Very informative, valuable thanks
Glad it was helpful!
Thanks Keith, great as always!
Thank you Ferry!
Thanks. I forgot about "default-information originate". I did the lab without first watching the video, but I was unsuccessfully using "redist static subnets".
Thank you IntuitiveGanesh for working on that lab! Hands on practice is one of the best ways to build your skills, and get better. Thank you!
Keith , we love the way you explain stuff. Would you tackle some cyber stuff like Tcpdump , Snort , Zeek , Tshark , Netflow , Suricata ?
Thank you for the question Alanazi. On this TH-cam channel, my primary focus will is Cisco CCNA. I appreciate the interest though.
Happy studies to you!
Great job over there
Thank you Taha!
Please I want to know if all the videos in this CCNA 200-301 playlist (about 61 of them) are the complete course and if it’s sufficient for me to sit for the exam or there are more topics to be covered?
I can't seem to get past "Server Reset Connection". I can ping the server, and I receive a reply, but I can't seem to load the website. when I do 'show ip nat translations', it shows that I am making udp requests to the server. I'm rather confused.
Cheers Keith. I did it. Kinda.
Thank you for taking it on. Every practice session helps us get a little better.
Your videos are amazing.
Sir I have one doubt regarding NAT specifically Destination NAT.
When we configuring destination NAT we'll configure one security policy also for allowing that particular traffic.
So my doubt is this, we know that when a packet is arriving to ingress interface the firewall will check the security policy then only it will go for NAT. So in case of this destination NAT, in the NAT rule source and destination are in Outside zone.
So which security policy will be inspected for that destination NAT rule.
Is that default intra-zone rule or the policy which we're explicitly configuring ?
I'm little bit confused there.🙂😀
Thank you Sreejith Jinachandran. Feel free to join my Discord sever. Lots of people there helping each other out. Each Saturday at 10am Pacific I hold my "Office Hour" where learners can ask questions about the topics they are studying. Mostly focusing on Cisco CCNA 200-301 topics. Feel free to join us there live if you are available. Here is the link ogit.online/Join_OGIT_on_Discord
Thanks again Sreejith Jinachandran!
Cool Dude 😍
when you have perimeter firewall then you would not require nat/pat enabled on edge router as firewall taking care of nat, correct?
your topology, is it consisting of access switch, distribution & core switches or just access & core switches?
Yes, you are right. If there was a firewall in the path, we could easily have done NAT/PAT on that L3 capable device instead of a router.
@@KeithBarker Thanks
Hi keith, why is that the default route next hop ip address used was 23.1.2.254?
Thank you for the question GA Leonor. I think that was the IP address I had configured on that next hop device.
hmmm having trouble understanding this inside local and outside global stuff. i am trying to do a static one to one translation but its not working. i think i keep getting the ip address mix up can you share the command for static one to one translation?
Thank you for the question Cedric Jones.
1 to 1 mapping:
ip nat inside source static 10.1.2.3 23.1.2.3
I am concerning about two thing..
First, default gateway is 23.1.2.254 but there is no interface has this address.
Without gateway how does the server send back..
Thank you Kamal, although I don't quite understand your question.
Hey so just to make sure I'm understanding, the command we did on R1 was so that it would share its default route with its OSPF neighbors?
Thank you for the question Stephen.
On R1, if it has a default route, it can advertise a default route for the OSPF network with this:
R1(config)#router ospf 1
R1(config-router)#default-information originate
Cheers!
@@KeithBarker how do you know if it has a default route? Can you show me where in OSPF 1(on edge rtr) it says it has a default route? I'm trying to understand that part. Thanks,
with nat or pat the outside interface of the router must be configured with one of the pool addresses ?
because i tried a lab with the outside interface that is one of the pool addressess and it works , but i tried to configure pat with an address that is not on the phisical interface and it didn't works (in both the cases i put the network in ospf to include it in the routing between the routers)
Thank you for the question Marko Haroon. If you use the "interface" and "overload" option, there is no pool involved. If you use a pool, it should be in the same subnet as the router outside interface. Normally we would exclude the router IP itself, along with any other already used IP addresses from that subnet, from being used with DHCP. I have an instructor hour each saturday at 10am pacific. Feel free to stop by and I can elaborate if you would like.
ogit.online/Join_OGIT_on_Discord
Happy studies.
@@KeithBarker thank you , by using "interface" insted of the pool everything worked immediately, and thank you also for clearify me that i have to use always a subnet of the outside interface addressess for the dynamic NAT, now i understood the concept
hey Keith, thanx a mil for labs .
im having a issue with packet tracer , i cant see any icons in packet tracer once i download from ur lab , instead of icons it says file not found. could you pls help me ?
thank you much appreciated 🙏
I am using 7.3 of packet tracer. If still having issues, you may want to re-install packet tracer, and download a fresh copy of the lab from TheKeithBarker.com
Hope that is useful, and happy continued studies and labs!
Just right before configuring the nat. If we trace a ping to the server from PC1 in simulation mode, the packet goes to access1 switch to the MLS2 to the edge switch. Not as I assume, the packet then does not cross the edge switch to the edge router. instead, it goes only to the MLS1, and from there, it goes back to the edge switch and crosses it to the edge router. could anyone explain this behavior? why the ICMP packet doesn't cross the edge switch from the first time?
Not sure I follow that whole flow, but if there is an error in PT, just remember that it is a simulation tool, and not the emulated environment. That may account for some differences with what is shown in simulation mode.
@@KeithBarker Thank you for the reply. In fact, I figured it out. Because MLS1 and MLS2 are configured with HSRP. Thus, one of them is active and tied to the gateway IP. That is MLS1 as it has the highest priority per the configurations. MLS2 is inactive (standby) when it comes to being a gateway. I hope my findings are correct. Thanks again.
Hello sir, How are you?
i am from Bangladesh
Hello Tahtihal! Welcome.