WEBVTT

1
00:00.000 --> 00:04.160
So now that we have our dynamic net access control list saying who may be

2
00:04.160 --> 00:07.840
translated with dynamic net and we also have a pool of addresses to play with.

3
00:07.840 --> 00:12.120
Our next step is then to go to our four and put some rules in place to specify

4
00:12.120 --> 00:16.970
if traffic matches that access control list to then go ahead and do address

5
00:16.970 --> 00:17.920
translation.

6
00:17.920 --> 00:21.460
Dynamically using an IP address in the pool so to configure that on our four

7
00:21.460 --> 00:25.490
will go back into configuration mode and here we'll specify IP net inside back

8
00:25.490 --> 00:27.360
is built that correctly inside there we go.

9
00:27.360 --> 00:31.490
Source list and here we're going to point to the access control list for
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

9
00:27.360 --> 00:31.490
Source list and here we're going to point to the access control list for

10
00:31.490 --> 00:35.520
dynamic net so effectively anything that's coming through the router on a net

11
00:35.520 --> 00:41.280
inside interface that matches the access control is called dynamic net space.

12
00:41.280 --> 00:44.760
We want to go ahead and choose an IP address from the pool so we use the

13
00:44.760 --> 00:48.920
keyword pool and then the name of our pool so our net pool is called our net

14
00:48.920 --> 00:51.360
pool I will copy and paste that so I don't have a typo.

15
00:51.360 --> 00:54.600
I'll do a space question mark and then we have a few additional options but we

16
00:54.600 --> 00:58.090
can just press carriage return right now which we'll do and now we have our

17
00:58.090 --> 01:02.800
first net rule so we do a do show IP net statistics and press enter.
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

17
00:58.090 --> 01:02.800
first net rule so we do a do show IP net statistics and press enter.

18
01:02.800 --> 01:06.920
So here's our first rule effectively traffic matching dynamic net is going to

19
01:06.920 --> 01:10.740
be mapped to an IP address from our net pool and here's the range of addresses

20
01:10.740 --> 01:11.520
in that pool.

21
01:13.760 --> 01:18.360
Also as part of our game plan a traffic that didn't match 1010 032 slash 27 or

22
01:18.360 --> 01:23.370
didn't match 1012 048 slash 29 for everything else we wanted to go ahead and do

23
01:23.370 --> 01:27.850
dynamic path so while we're here at our four let's also set up the rule for

24
01:27.850 --> 01:32.240
dynamic path and for translations will simply map it to the interface address
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

24
01:27.850 --> 01:32.240
dynamic path and for translations will simply map it to the interface address

25
01:32.240 --> 01:36.760
that's already on gig 2 0 right here so for our next rule do IP net inside

26
01:36.760 --> 01:41.810
source and we want to match on the dynamic path access control list so scroll

27
01:41.810 --> 01:43.360
up and copy and paste that.

28
01:43.360 --> 01:47.870
Right there dynamic path which is matching on 10 anything I'll paste that in an

29
01:47.870 --> 01:52.050
if traffic matches on that access control is called dynamic path for the actual

30
01:52.050 --> 01:55.470
translation we want to use interface on our four interface let's look at the

31
01:55.470 --> 02:00.670
topology so I get it correct it'll be interface gig 2 slash 0 and the keyword
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

31
01:55.470 --> 02:00.670
topology so I get it correct it'll be interface gig 2 slash 0 and the keyword

32
02:00.670 --> 02:04.310
overload which allows us to overload the translation so we can have thousands

33
02:04.310 --> 02:08.100
literally thousands of inside clients all mapping to that single address on the

34
02:08.100 --> 02:08.560
outside.

35
02:08.560 --> 02:12.830
So we'll type in the keyword overload and press enter and now we do a show IP

36
02:12.830 --> 02:17.380
net statistics it can show us our net rules so we've got our outside interfaces

37
02:17.380 --> 02:21.790
we have our inside interfaces we have our dynamic net rule here and then we

38
02:21.790 --> 02:25.800
have our dynamic path rule here and based on this output we already have some

39
02:25.800 --> 02:30.000
hit counts and that's because behind the scenes the windows client and a few
WEBVTT
X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000

40
02:30.000 --> 02:35.610
other devices are attempting to use the server at 23.1.2.100 for DNS and other

41
02:35.610 --> 02:38.160
functions so in the next video let's go ahead and see what we're going to do.

42
02:38.160 --> 02:41.820
Let's go ahead and clear the net table on our four and then we'll do some

43
02:41.820 --> 02:45.960
specific testing to validate that the translations that we expect to show up on

44
02:45.960 --> 02:47.760
our four actually are happening.