PART 1:  Type out the necessary commands for this router (refer to the network topology diagram provided below) to implement NAT Overload (PAT) for subnets A and B ONLY.  

PART 2:  Additionally, create an ACL to prevent PC A from accessing the Internet except PC A should be allowed to access the Web Server (201.101.0.1) but only for HTTP and HTTPS.  PC A should still be allowed to access all internal subnets.

PART 1:  Type out the necessary commands for this router (refer to the network topology diagram provided below) to implement NAT Overload (PAT) for subnets A and B ONLY.  

PART 2:  Additionally, create an ACL to prevent PC A from accessing the Internet except PC A should be allowed to access the Web Server (201.101.0.1) but only for HTTP and HTTPS.  PC A should still be allowed to access all internal subnets.

> Need help changing this >>>>>>>>>>>  

Part 1:

ip nat pool SUBNETA-B 10.0.0.0 10.0.1.255 netmask 255.255.254.0

access-list 1 permit 10.0.0.0 0.0.1.255

ip nat inside source list 1 pool SUBNETA-B overload

interface g0/0

ip nat inside

interface g0/1

ip nat inside

interface s0/0/0

ip nat outside

 

Part 2:

ip nat pool SUBNETA-B 10.0.0.0 10.0.1.255 netmask 255.255.254.0

access-list 101 permit tcp host 10.0.0.11 host 201.101.0.1 eq http,https

access-list 101 permit ip host 10.0.0.11 10.0.0.0 0.0.1.255 any

access-list 101 deny tcp host 10.0.0.11 any any

access-list 101 permit ip 10.0.0.0 0.0.1.255 any any

ip nat inside source list 101 pool SUBNETA-B overload

interface g0/0

ip nat inside

interface g0/1

ip nat inside

interface s0/0/0

ip nat outside

Attachments:

• 1494053252-DiscussionChpter11CiscoNEtworking.png