NAT translates between inside-local (private), inside-global (public), outside-local and outside-global. Four flavours:
| Type | Mapping | Inbound | Public IPs |
|---|---|---|---|
| Static | 1:1 permanent | yes | 1 per host — servers |
| Dynamic | 1:1 temporary from pool | no | pool |
| PAT / overload | many:1 by ports | no | one — the internet default |
interface g0/0
ip nat inside
interface g0/1
ip nat outside
! static
ip nat inside source static 192.168.1.10 203.0.113.10
! PAT with interface
ip nat inside source list 1 interface g0/1 overload
Return traffic is matched against the NAT translation table. Traps: wrong inside/outside assignment, ACL not matching, routing evaluated before NAT, asymmetric paths. PAT breaks protocols that embed addresses (FTP active, SIP) — hence ALGs.
show ip nat translations
show ip nat statistics
clear ip nat translation *