So now that we have our dynamic net access control list saying who may be
translated with dynamic net and we also have a pool of addresses to play with.
Our next step is then to go to our four and put some rules in place to specify
if traffic matches that access control list to then go ahead and do address
translation.
Dynamically using an IP address in the pool so to configure that on our four
will go back into configuration mode and here we'll specify IP net inside back
is built that correctly inside there we go.
Source list and here we're going to point to the access control list for WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
Source list and here we're going to point to the access control list for
dynamic net so effectively anything that's coming through the router on a net
inside interface that matches the access control is called dynamic net space.
We want to go ahead and choose an IP address from the pool so we use the
keyword pool and then the name of our pool so our net pool is called our net
pool I will copy and paste that so I don't have a typo.
I'll do a space question mark and then we have a few additional options but we
can just press carriage return right now which we'll do and now we have our
first net rule so we do a do show IP net statistics and press enter. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
first net rule so we do a do show IP net statistics and press enter.
So here's our first rule effectively traffic matching dynamic net is going to
be mapped to an IP address from our net pool and here's the range of addresses
in that pool.
Also as part of our game plan a traffic that didn't match 1010 032 slash 27 or
didn't match 1012 048 slash 29 for everything else we wanted to go ahead and do
dynamic path so while we're here at our four let's also set up the rule for
dynamic path and for translations will simply map it to the interface address WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
dynamic path and for translations will simply map it to the interface address
that's already on gig 2 0 right here so for our next rule do IP net inside
source and we want to match on the dynamic path access control list so scroll
up and copy and paste that.
Right there dynamic path which is matching on 10 anything I'll paste that in an
if traffic matches on that access control is called dynamic path for the actual
translation we want to use interface on our four interface let's look at the
topology so I get it correct it'll be interface gig 2 slash 0 and the keyword WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
topology so I get it correct it'll be interface gig 2 slash 0 and the keyword
overload which allows us to overload the translation so we can have thousands
literally thousands of inside clients all mapping to that single address on the
outside.
So we'll type in the keyword overload and press enter and now we do a show IP
net statistics it can show us our net rules so we've got our outside interfaces
we have our inside interfaces we have our dynamic net rule here and then we
have our dynamic path rule here and based on this output we already have some
hit counts and that's because behind the scenes the windows client and a few WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000
other devices are attempting to use the server at 23.1.2.100 for DNS and other
functions so in the next video let's go ahead and see what we're going to do.
Let's go ahead and clear the net table on our four and then we'll do some
specific testing to validate that the translations that we expect to show up on
our four actually are happening.