Share one address with PAT
Everybody on the LAN (192.168.1.0/24) needs internet access, and R1 has only its own outside address, 203.0.113.2. Set up PAT on R1 using ACL 1 and the Gi0/1 interface address.
How it works: this is VulnTech NetLab, a network simulator running in your browser. Click a device in the diagram to open its console and type commands, just like on real equipment (? shows help, Tab finishes a word). Click a cable to inspect it. Tasks tick themselves off as you complete them; questions are answered in the box under each task. Your work is kept if you reload; Reset starts the network over.
Solution explanation
With overload, every inside host is translated to 203.0.113.2 and the port numbers keep the conversations apart. ACL 1 only selects who is translated; it doesn't block anyone.
Show solution
[R1]
enable
configure terminal
access-list 1 permit 192.168.1.0 0.0.0.255
ip nat inside source list 1 interface g0/1 overload
interface g0/0
ip nat inside
interface g0/1
ip nat outside
end
[PC1]
ping 198.51.100.10
[PC2]
curl http://198.51.100.10
[R1]
show ip nat translations