Question

A network engineer configures PAT on a router named EDGE so that all hosts on the inside LAN (192.168.10.0/24) can reach the Internet using the single public IP assigned to interface GigabitEthernet0/1 (203.0.113.5). Internal users report they cannot browse the Internet. The engineer runs 'show ip nat translations' and sees no entries. The current configuration is:

interface GigabitEthernet0/0
 ip address 192.168.10.1 255.255.255.0
 ip nat inside
interface GigabitEthernet0/1
 ip address 203.0.113.5 255.255.255.248

ip access-list standard NAT_HOSTS
 permit 192.168.10.0 0.0.0.255
ip nat inside source list NAT_HOSTS interface GigabitEthernet0/1 overload

Which action will fix the problem?

Accepted Answer

Add the 'ip nat outside' command to interface GigabitEthernet0/1

Answer

Change the ACL to an extended access list matching TCP and UDP traffic

Answer

Remove the 'overload' keyword because it prevents dynamic translations

Answer

Add a static NAT entry mapping 192.168.10.0 to 203.0.113.5