{"id":37723,"date":"2019-10-31T22:19:20","date_gmt":"2019-10-31T19:19:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat\/"},"modified":"2019-10-31T22:19:20","modified_gmt":"2019-10-31T19:19:20","slug":"trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat","title":{"rendered":"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ast\u0103zi vom studia PAT (Port Address Translation), tehnologia de traducere a adreselor IP folosind porturi, \u0219i NAT (Network Address Translation), tehnologia de conversie a adreselor IP ale pachetelor de tranzit. PAT este un caz special de NAT. Vom discuta despre trei subiecte: <\/p>\n<p> \u2014 adrese IP private sau interne (locale) \u0219i adrese IP publice sau externe;<br \/>\n \u2014 NAT \u0219i PAT;<br \/>\n \u2014 configurarea NAT\/PAT.<\/p>\n<p>S\u0103 \u00eencepem cu adresele IP private. \u0218tim c\u0103 acestea sunt \u00eemp\u0103r\u021bite \u00een trei clase: A, B \u0219i C. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/0bb1aa42bce98cf59184fa678f94a071.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAdresele interne din clasa A ocup\u0103 intervalul \u201ezecilor\u201d de la 10.0.0.0 la 10.255.255.255, iar cele externe \u2013 intervalul de la 1.0.0.0 la 9.255.255.255 \u0219i de la 11.0.0.0 la 126.255.255.255. <\/p>\n<p>Adresele interne din clasa B ocup\u0103 intervalul de la 172.16.0.0 la 172.31.255.255, iar cele externe \u2013 de la 128.0.0.0 la 172.15.255.255 \u0219i de la 172.32.0.0 la 191.255.255.255.<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Adresele interne din clasa C ocup\u0103 intervalul de la 192.168.0.0 la 192.168.255.255, iar cele externe \u2013 de la 192.0.0.0 la 192.167.255.255 \u0219i de la 192.169.0.0 la 223.255.255.255.<\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/e8c33c20423db3d916dd2b5164c84b9c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAdresele din clasa A sunt adrese \/8, din clasa B \u2014 \/12 \u0219i din clasa C \u2014 \/16. Astfel, adresele IP externe \u0219i interne din diferite clase ocup\u0103 intervale diferite. <\/p>\n<p>Am discutat de mai multe ori despre diferen\u021ba dintre adresele IP private \u0219i cele publice. \u00cen general, dac\u0103 avem un router \u0219i un grup de adrese IP interne, atunci c\u00e2nd \u00eencerc\u0103m s\u0103 ie\u0219im pe internet, routerul le converte\u0219te \u00een adrese IP externe. Adresele interne sunt folosite exclusiv \u00een re\u021bele locale, nu pe internet. <\/p>\n<p>Dac\u0103 vizualizez parametrii de re\u021bea ai computerului meu folosind linia de comand\u0103, voi vedea adresa mea IP LAN intern\u0103 192.168.1.103.<\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/15742410dd5b0b7eb0d845ccd6ef4ddc.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPentru a-mi afla adresa IP public\u0103, pot folosi un serviciu online de tip \u201eCare este IP-ul meu\u201d? A\u0219a cum pute\u021bi vedea, adresa extern\u0103 a computerului este 78.100.196.163, diferit\u0103 de adresa sa intern\u0103. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/ebf4e4040d30ac25ff540356ce16c3eb.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen toate cazurile, computerul meu este vizibil pe internet prin adresa IP extern\u0103. A\u0219adar, adresa intern\u0103 a computerului meu este 192.168.1.103, iar cea extern\u0103 \u2014 78.100.196.163. Adresa intern\u0103 este folosit\u0103 doar pentru comunicarea local\u0103, iar pentru a ie\u0219i pe internet ave\u021bi nevoie de o adres\u0103 IP public\u0103. Pute\u021bi s\u0103 v\u0103 aminti\u021bi de ce a fost realizat\u0103 separarea \u00eentre adresele private \u0219i cele publice revizion\u00e2nd lec\u021bia video Ziua 3. <\/p>\n<p>S\u0103 discut\u0103m despre ceea ce este NAT. Exist\u0103 trei tipuri de NAT: NAT static, NAT dinamic \u0219i NAT \u201eoverloaded\u201d, sau PAT.<\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/ff62b6b296682722436c45f6a9a3da75.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen Cisco exist\u0103 4 termeni care descriu NAT. A\u0219a cum am spus, NAT este un mecanism de transformare a adreselor interne \u00een externe. Dac\u0103 un dispozitiv conectat la internet prime\u0219te un pachet de la alt dispozitiv din re\u021beaua local\u0103, acesta va respinge pur \u0219i simplu pachetul, deoarece formatul adresei interne nu corespunde formatului adreselor utilizate \u00een re\u021beaua global\u0103 de internet. Prin urmare, dispozitivul trebuie s\u0103 ob\u021bin\u0103 o adres\u0103 IP public\u0103 pentru a ie\u0219i \u00een internet. <br \/>\nDeci, primul termen este Inside Local, care se refer\u0103 la adresa IP a gazdei \u00een re\u021beaua intern\u0103, local\u0103. Pe scurt, aceasta este adresa principal\u0103 a sursei de tip 192.168.1.10. Al doilea termen, Inside Global, este adresa IP a gazdei locale, sub care este vizibil \u00een re\u021beaua extern\u0103. \u00cen cazul nostru, aceasta este adresa IP a portului extern al routerului 200.124.22.10.<\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/486085260247bf6da22c96ba6a3fc804.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSe poate spune c\u0103 Inside Local este o adres\u0103 IP privat\u0103, iar Inside Global este o adres\u0103 IP public\u0103. Re\u021bine\u021bi c\u0103 termenul Inside este folosit \u00een raport cu sursa traficului, \u00een timp ce Outside se refer\u0103 la destina\u021bia traficului. Outside Local este adresa IP a gazdei \u00een re\u021beaua extern\u0103, sub care este vizibil pentru re\u021beaua intern\u0103. Pe scurt, aceasta este adresa destinatarului, vizibil\u0103 din re\u021beaua intern\u0103. Un exemplu de astfel de adres\u0103 este adresa IP 200.124.22.100 a unui dispozitiv situat pe internet. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/6e53432b17156d7d031cfa7d83dc6d68.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nOutside Global este adresa IP a gazdei, vizibil\u0103 \u00een re\u021beaua extern\u0103. \u00cen majoritatea cazurilor, adresele Outside Local \u0219i Outside Global arat\u0103 la fel, deoarece chiar \u0219i dup\u0103 transformarea IP-ului de destina\u021bie este vizibil pentru surs\u0103 la fel ca \u00eenainte de transformare. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/678a3bb319c407dbc8f9aaccd01b64ab.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nS\u0103 consider\u0103m ce reprezint\u0103 NAT static. NAT static \u00eenseamn\u0103 transformarea unu-la-unu a adreselor IP interne \u00een externe, sau transformarea \u201ede tip unu la unu\u201d. C\u00e2nd dispozitivele trimit trafic pe internet, adresele lor interne Inside Local sunt transformate \u00een adrese interne Inside Global.<\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/406206cf1f961fff48abeb00f4c8c741.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen re\u021beaua noastr\u0103 local\u0103 sunt 3 dispozitive, iar c\u00e2nd acestea \u00eencearc\u0103 s\u0103 ias\u0103 pe internet, fiecare dintre ele prime\u0219te propria adres\u0103 Inside Global. Aceste adrese sunt atribuite static surselor de trafic. Principiul \u201eunu la unu\u201d \u00eenseamn\u0103 c\u0103, dac\u0103 \u00een re\u021beaua local\u0103 se afl\u0103 100 de dispozitive, acestea primesc 100 de adrese externe. <\/p>\n<p>NAT a ap\u0103rut pentru a salva Internetul \u00een care se terminau adresele IP publice. Datorit\u0103 NAT, multe companii, multe re\u021bele pot avea o singur\u0103 adres\u0103 IP extern\u0103 comun\u0103, \u00een care adresele locale ale dispozitivelor se transform\u0103 atunci c\u00e2nd acceseaz\u0103 internetul. Pute\u021bi spune c\u0103 \u00een acest caz nu exist\u0103 nicio economisire a num\u0103rului de adrese cu NAT static, deoarece o sut\u0103 de computere locale primesc o sut\u0103 de adrese externe, \u0219i ave\u021bi dreptate. Totu\u0219i, NAT static are totu\u0219i o serie de avantaje.<\/p>\n<p>De exemplu, avem un server cu o adres\u0103 IP intern\u0103 192.168.1.100. Dac\u0103 un dispozitiv din Internet vrea s\u0103 se conecteze la el, nu poate face acest lucru folosind adresa intern\u0103 de destina\u021bie, pentru aceasta trebuie s\u0103 foloseasc\u0103 adresa extern\u0103 a serverului 200.124.22.3. Dac\u0103 routerul este configurat cu NAT static, tot traficul adresat lui 200.124.22.3 este redirec\u021bionat automat c\u0103tre 192.168.1.100. Astfel, se asigur\u0103 accesul extern la dispozitivele din re\u021beaua local\u0103, \u00een acest caz la serverul web al companiei, lucru care poate fi necesar \u00een anumite situa\u021bii. <\/p>\n<p>S\u0103 analiz\u0103m NAT dinamic. Este foarte asem\u0103n\u0103tor cu cel static, dar nu aloc\u0103 adrese externe permanente fiec\u0103rui dispozitiv local. De exemplu, avem 3 dispozitive locale \u0219i doar 2 adrese externe. Dac\u0103 al doilea dispozitiv vrea s\u0103 acceseze internetul, i se va aloca prima adres\u0103 IP liber\u0103. Dac\u0103 dup\u0103 acesta un server web vrea s\u0103 acceseze internetul, routerul \u00eei va aloca a doua adres\u0103 extern\u0103 disponibil\u0103. Dac\u0103 dup\u0103 aceea primul dispozitiv vrea s\u0103 ias\u0103 \u00een re\u021beaua extern\u0103, nu va exista o adres\u0103 IP disponibil\u0103 pentru el, iar routerul va respinge pachetul s\u0103u. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/0d79a84392f1b4822e5883777d307f20.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPutem avea o sut\u0103 de dispozitive cu adrese IP interne, iar fiecare dintre aceste dispozitive poate accesa internetul. Dar av\u00e2nd \u00een vedere c\u0103 nu avem o alocare static\u0103 a adreselor externe, nu pot ie\u0219i simultan \u00een internet mai mult de 2 dispozitive din sut\u0103, deoarece avem doar dou\u0103 adrese externe alocate dinamic. <\/p>\n<p>Dispozitivele Cisco au un timp fix de conversie a adreselor, care, \u00een mod implicit, este de 24 de ore. Acesta poate fi modificat la 1, 2, 3, 10 minute, sau la orice alt interval de timp dorit. Dup\u0103 expirarea acestui timp, adresele externe sunt eliberate \u0219i reintegrate automat \u00een pool-ul de adrese. Dac\u0103 \u00een acel moment primul dispozitiv dore\u0219te s\u0103 se conecteze la internet \u0219i vreo adres\u0103 extern\u0103 devine disponibil\u0103, aceasta va fi alocat\u0103. Routerul con\u021bine un tabel NAT, care se actualizeaz\u0103 dinamic, \u0219i, at\u00e2ta timp c\u00e2t timpul de conversie nu a expirat, adresa alocat\u0103 r\u0103m\u00e2ne rezervat\u0103 dispozitivului. Cu alte cuvinte, NAT dinamic func\u021bioneaz\u0103 pe principiul: \u201eprimul venit, primul servit.\u201d <\/p>\n<p>S\u0103 analiz\u0103m ce reprezint\u0103 NAT-ul suprasolicitat sau PAT. Acesta este cel mai comun tip de NAT. \u00cen re\u021beaua dumneavoastr\u0103 de acas\u0103 pot exista numeroase dispozitive \u2013 PC-uri, smartphone-uri, laptopuri, tablete, \u0219i toate acestea se conecteaz\u0103 la un router, care are o singur\u0103 adres\u0103 IP extern\u0103. A\u0219adar, PAT permite multor dispozitive cu adrese IP interne s\u0103 acceseze simultan internetul folosind aceea\u0219i adres\u0103 IP extern\u0103. Acest lucru este posibil datorit\u0103 faptului c\u0103 fiecare adres\u0103 IP privat\u0103, intern\u0103 folose\u0219te un num\u0103r specific de port \u00een timpul unei sesiuni de comunicare. <br \/>\nS\u0103 presupunem c\u0103 avem o adres\u0103 public\u0103 200.124.22.1 \u0219i numeroase dispozitive locale. A\u0219adar, atunci c\u00e2nd ies pe internet, toate aceste utilitare vor primi aceea\u0219i adres\u0103 200.124.22.1. Singurul lucru care le va diferen\u021bia este num\u0103rul de port. <br \/>\nDac\u0103 v\u0103 aminti\u021bi discu\u021bia despre nivelul de transport, \u0219ti\u021bi c\u0103 acest nivel con\u021bine numere de port, iar num\u0103rul de port surs\u0103 reprezint\u0103 un num\u0103r aleator. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/925a623821633f1159c6aaac50f4a97f.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nS\u0103 presupunem c\u0103 exist\u0103 un host \u00een re\u021beaua extern\u0103 cu adresa IP 200.124.22.10, care este conectat la internet. Dac\u0103 computerul 192.168.1.11 vrea s\u0103 se conecteze la computerul 200.124.22.10, va crea un port surs\u0103 aleatoriu 51772. \u00cen acest caz, portul de destina\u021bie al computerului din re\u021beaua extern\u0103 va fi 80. <\/p>\n<p>C\u00e2nd routerul prime\u0219te pachetul de la computerul local destinat re\u021belei externe, acesta va traduce adresa local\u0103 Inside Local \u00een adresa Inside Global 200.124.22.1 \u0219i va atribui portului num\u0103rul 23556. Pachetul va ajunge la computerul 200.124.22.10, iar acesta va trebui s\u0103 trimit\u0103 \u00eenapoi un r\u0103spuns conform procedurii de stabilire a conexiunii, av\u00e2nd ca destina\u021bie adresa 200.124.22.1 \u0219i portul 23556. <\/p>\n<p>Routerul are un tabel de traducere NAT, a\u0219a c\u0103, primind un pachet de la un computer extern, va determina adresa Inside Local corespunz\u0103toare adresei Inside Global ca 192.168.1.11: 51772 \u0219i va retransmite pachetul. Dup\u0103 aceasta, conexiunea \u00eentre cele dou\u0103 computere poate fi considerat\u0103 stabilit\u0103. <br \/>\n\u00cen acela\u0219i timp, pute\u021bi avea sute de dispozitive care folosesc aceea\u0219i adres\u0103 de 200.124.22.1 pentru comunicare, dar cu numere de porturi diferite, ceea ce le permite tuturor s\u0103 ias\u0103 simultan pe internet. De aceea, PAT este o metod\u0103 at\u00e2t de popular\u0103 de traducere.<\/p>\n<p>S\u0103 analiz\u0103m configurarea NAT static. Pentru orice re\u021bea, este esen\u021bial s\u0103 se determine mai \u00eent\u00e2i interfe\u021bele de intrare \u0219i ie\u0219ire. \u00cen schema este prezentat routerul prin care se realizeaz\u0103 transferul de trafic de la portul G0\/0 la portul G0\/1, adic\u0103 din re\u021beaua intern\u0103 c\u0103tre re\u021beaua extern\u0103. Astfel, avem interfa\u021ba de intrare 192.168.1.1 \u0219i interfa\u021ba de ie\u0219ire 200.124.22.1. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/d87aaf1b23645fc51784f49654eb85e3.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nPentru a configura NAT, mergem la interfa\u021ba G0\/0 \u0219i set\u0103m parametrii ip address 192.168.1.1 255.255.255.0 \u0219i specific\u0103m c\u0103 aceast\u0103 interfa\u021b\u0103 este de intrare, folosind comanda ip nat inside. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/f1389dae6c9a8bab133cab0dd02b3510.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen mod similar, configur\u0103m NAT pe interfa\u021ba de ie\u0219ire G0\/1, specific\u00e2nd ip address 200.124.22.1, masca de subre\u021bea 255.255.255.0 \u0219i ip nat outside. Re\u021bine\u021bi c\u0103 transformarea NAT dinamic este \u00eentotdeauna realizat\u0103 de la interfa\u021ba de intrare la interfa\u021ba de ie\u0219ire, de la inside la outside. Bine\u00een\u021beles, pentru NAT dinamic, r\u0103spunsul vine la interfa\u021ba de intrare prin cea de ie\u0219ire, dar la ini\u021bierea traficului se activeaz\u0103 direc\u021bia in-out. \u00cen cazul NAT-ului static, ini\u021bierea traficului se poate face \u00een oricare dintre direc\u021bii \u2013 in-out sau out-in. <\/p>\n<p>Apoi trebuie s\u0103 elabor\u0103m un tabel de NAT static, unde fiec\u0103rei adrese locale \u00eei corespunde o adres\u0103 global\u0103 distinct\u0103. \u00cen cazul nostru, avem 3 dispozitive, a\u0219adar tabelul va consta din 3 \u00eenregistr\u0103ri, \u00een care se specific\u0103 adresa IP Inside Local a sursei, care este transformat\u0103 \u00een adresa Inside Global: ip nat inside static 192.168.1.10 200.124.22.1. <br \/>\nAstfel, \u00een NAT-ul static, specifica\u021bi manual transformarea pentru fiecare adres\u0103 a gazdelor locale. Acum voi trece la Packet Tracer \u0219i voi efectua set\u0103rile descrise mai sus. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/aecdf044cb8b82154e984446cdbcd477.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen partea de sus se afl\u0103 serverul 192.168.1.100, mai jos se afl\u0103 computerul 192.168.1.10, iar la baza ierarhiei se afl\u0103 computerul 192.168.1.11. Portul G0\/0 al routerului Router0 are adresa IP 192.168.1.1, iar portul G0\/1 \u2013 200.124.22.1. \u00cen \u00abnorul\u00bb care reprezint\u0103 internetul, am plasat Router1, c\u0103ruia i-am alocat adresa IP 200.124.22.10.<\/p>\n<p>Acced \u00een set\u0103rile Router1 \u0219i introduc comanda debug ip icmp. Acum, de \u00eendat\u0103 ce ping-ul ajunge la acest dispozitiv, fereastra de set\u0103ri va ar\u0103ta un mesaj de depanare care indic\u0103 tipul de pachet. <br \/>\nS\u0103 \u00eencepem configurarea routerului Router0. M\u0103 duc \u00een modul de configurare global\u0103 \u0219i activez interfa\u021ba G0\/0. Apoi introduc comanda ip nat inside, dup\u0103 care trec la interfa\u021ba g0\/1 \u0219i introduc comanda ip nat outside. Astfel, am desemnat interfe\u021bele de intrare \u0219i ie\u0219ire ale routerului. Acum trebuie s\u0103 configurez manual adresele IP, adic\u0103 s\u0103 introduc \u00een set\u0103ri liniile din tabelul men\u021bionat anterior: <\/p>\n<p>Ip nat inside source static 192.168.1.10 200.124.22.1 <br \/>\nIp nat inside source static 192.168.1.11 200.124.22.2<br \/>\nIp nat inside source static 192.168.1.100 200.124.22.3 <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/bfdf965dadab11e562685d9be358a1a2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAcum voi face ping la Router1 de la fiecare dintre dispozitivele noastre \u0219i voi verifica ce adrese IP vor fi ar\u0103tate de ping-ul primit. Pentru aceasta, a\u0219ez fereastra CLI a routerului R1 \u00een partea dreapt\u0103 a ecranului pentru a vedea mesajele de depanare. Apoi, m\u0103 duc \u00een terminalul de linie de comand\u0103 al PC0 \u0219i fac ping la adresa 200.124.22.10. Dup\u0103 aceea, fereastra arat\u0103 un mesaj c\u0103 ping-ul a fost primit de la adresa IP 200.124.22.1. Acest lucru \u00eenseamn\u0103 c\u0103 adresa IP a computerului local 192.168.1.10 a fost transformat\u0103 \u00een adresa global\u0103 200.124.22.1.<\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/64f2d89214b4e49d29f5b131630555ce.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nFac acela\u0219i lucru \u0219i cu urm\u0103torul computer local \u0219i observ c\u0103 adresa lui a fost transformat\u0103 \u00een 200.124.22.2. Apoi, trimit un ping de pe server \u0219i v\u0103d adresa 200.124.22.3.<br \/>\nAstfel, c\u00e2nd traficul de la un dispozitiv din re\u021beaua local\u0103 ajunge la routerul pe care este configurat NAT static, routerul transform\u0103 adresa IP local\u0103 \u00een adresa global\u0103 conform tabelului \u0219i trimite traficul \u00een re\u021beaua extern\u0103. Pentru a verifica tabelul NAT, introduc comanda show ip nat translations.<\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/e7eab03a79633d7d99890584a705ad39.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAcum putem vizualiza toate conversiile efectuate de router. \u00cen prima coloan\u0103 Inside Global este adresa dispozitivului \u00eenainte de traducere, adic\u0103 adresa sub care dispozitivul este vizibil din re\u021beaua extern\u0103; apoi urmeaz\u0103 adresa Inside Local, care este adresa dispozitivului \u00een re\u021beaua local\u0103. A treia coloan\u0103 arat\u0103 Outside Local, iar a patra \u2013 adresa Outside Global, ambele fiind identice, deoarece nu supunem IP-ul destina\u021biei la conversie. Dup\u0103 cum pute\u021bi observa, dup\u0103 c\u00e2teva secunde tabela s-a golit, deoarece \u00een Packet Tracer este setat un timp redus de expirare pentru ping. <\/p>\n<p>Pot face ping de pe routerul R1 la serverul de la adresa 200.124.22.3, iar dac\u0103 revenim la set\u0103rile routerului, putem vedea c\u0103 tabela s-a umplut din nou cu patru linii de ping cu adresa de destina\u021bie convertit\u0103 192.168.1.100.<\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/63aadbc9f15afb27d708e6fe1d87908c.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDup\u0103 cum am men\u021bionat, chiar dac\u0103 a fost activat un time-out pentru traducere, ini\u021bierea traficului dintr-o surs\u0103 extern\u0103 activeaz\u0103 automat mecanismul NAT. Aceasta se \u00eent\u00e2mpl\u0103 doar \u00een cazul NAT-ului static. <\/p>\n<p>Acum s\u0103 analiz\u0103m cum func\u021bioneaz\u0103 NAT-ul dinamic. \u00cen exemplul nostru avem 2 adrese publice pentru trei dispozitive din re\u021beaua local\u0103, \u00eens\u0103 pot exista zeci sau sute de astfel de gazde private. \u00cens\u0103, simultan, doar 2 dispozitive pot accesa internetul. Haide\u021bi s\u0103 vedem care este, dincolo de aceasta, diferen\u021ba dintre NAT-ul static \u0219i NAT-ul dinamic.<\/p>\n<p>Ca \u0219i \u00een cazul precedent, trebuie mai \u00eent\u00e2i s\u0103 determin\u0103m interfe\u021bele de intrare \u0219i ie\u0219ire ale routerului. Apoi, cre\u0103m un fel de list\u0103 de acces, dar aceasta nu este ACL-ul despre care am discutat \u00een lec\u021bia anterioar\u0103. Aceast\u0103 list\u0103 de acces este folosit\u0103 pentru a identifica traficul pe care dorim s\u0103-l convertim. Aici apare un nou termen: \"traffic interesant\", sau \"trafic interesant\". Acesta este traficul care v\u0103 intereseaz\u0103 dintr-un anumit motiv, iar c\u00e2nd acest trafic se potrive\u0219te cu condi\u021biile listei de acces, acesta intr\u0103 sub inciden\u021ba NAT \u0219i este convertit. Acest termen se aplic\u0103 traficului \u00een multe cazuri; de exemplu, \u00een cazul VPN, \"interesant\" se refer\u0103 la traficul pe care inten\u021biona\u021bi s\u0103-l lansa\u021bi prin tunelul VPN. <\/p>\n<p>Trebuie s\u0103 cre\u0103m un ACL care identific\u0103 traficul interesant; \u00een cazul nostru, acest trafic provine din \u00eentreaga re\u021bea 192.168.1.0, \u00eempreun\u0103 cu masca invers\u0103 0.0.0.255. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/243fdeb9693c2e7eee9122e6f2436ff6.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nApoi trebuie s\u0103 cre\u0103m un pool NAT, folosind comanda ip nat pool  \u0219i specific\u00e2nd pool-ul de adrese IP 200.124.22.1 200.124.22.2. Aceasta \u00eenseamn\u0103 c\u0103 oferim doar dou\u0103 adrese IP externe. Apoi, \u00een comand\u0103 se utilizeaz\u0103 cuv\u00e2ntul cheie netmask \u0219i se introduce masca de subre\u021bea 255.255.255.252. Ultimul octet al m\u0103\u0219tii este egal cu (255 \u2014 num\u0103rul adreselor din pool \u2013 1), a\u0219a c\u0103, dac\u0103 ave\u021bi \u00een pool 254 adrese, masca de subre\u021bea va fi 255.255.255.0. Acesta este un parametru foarte important, a\u0219a c\u0103, atunci c\u00e2nd configura\u021bi NAT dinamic, asigura\u021bi-v\u0103 c\u0103 introduce\u021bi valoarea corect\u0103 pentru netmask. <\/p>\n<p>Apoi folosim comanda care activeaz\u0103 mecanismul NAT: ip nat inside source list 1 pool NWKING, unde NWKING este numele pool-ului, iar list 1 \u00eenseamn\u0103 lista de acces ACL num\u0103rul 1. Re\u021bine\u021bi \u2014 pentru ca aceast\u0103 comand\u0103 s\u0103 func\u021bioneze, trebuie mai \u00eent\u00e2i s\u0103 crea\u021bi un pool de adrese dinamice \u0219i o list\u0103 de acces. <\/p>\n<p>Prin urmare, \u00een condi\u021biile noastre, primul dispozitiv care dore\u0219te s\u0103 acceseze internetul va putea s\u0103 o fac\u0103, al doilea dispozitiv, de asemenea, \u00eens\u0103 al treilea va trebui s\u0103 a\u0219tepte p\u00e2n\u0103 c\u00e2nd una dintre adresele din pool se va elibera. Configurarea NAT-ului dinamic const\u0103 \u00een 4 pa\u0219i: definirea interfe\u021bei de intrare \u0219i ie\u0219ire, definirea traficului \u00abinteresant\u00bb, crearea pool-ului NAT \u0219i, \u00een sf\u00e2r\u0219it, configurarea propriu-zis\u0103. <br \/>\nAcum vom trece la Packet Tracer \u0219i vom \u00eencerca s\u0103 configur\u0103m NAT dinamic. Mai \u00eent\u00e2i, trebuie s\u0103 elimin\u0103m configura\u021biile statice NAT, pentru care introducem secven\u021bial comenzile:<\/p>\n<p>no Ip nat inside source static 192.168.1.10 200.124.22.1 <br \/>\nno Ip nat inside source static 192.168.1.11 200.124.22.2<br \/>\nno Ip nat inside source static 192.168.1.100 200.124.22.3. <\/p>\n<p>Apoi, creez lista de acces List 1 pentru \u00eentreaga re\u021bea folosind comanda access-list 1 permit 192.168.1.0 0.0.0.255 \u0219i formez pool-ul NAT cu comanda ip nat pool NWKING 200.124.22.1 200.124.22.2 netmask 255.255.255.252. \u00cen aceast\u0103 comand\u0103 am specificat numele pool-ului, adresele care fac parte din acesta \u0219i masca de re\u021bea.<\/p>\n<p>Apoi specific faptul c\u0103 este un NAT \u2013 intern sau extern, \u0219i sursa de la care NAT ar trebui s\u0103 extrag\u0103 informa\u021bii, \u00een cazul nostru este lista, folosind comanda ip nat inside source list 1. Dup\u0103 aceasta, sistemul va oferi o sugestie \u2013 este nevoie de un \u00eentreg pool sau de o interfa\u021b\u0103 specific\u0103. Aleg pool deoarece avem mai mult de o adres\u0103 extern\u0103. Dac\u0103 alegem interfa\u021ba, va trebui s\u0103 specific\u0103m portul cu o adres\u0103 IP anume. \u00cen forma final\u0103, comanda va ar\u0103ta astfel: ip nat inside source list 1 pool NWKING. Acest pool con\u021bine acum dou\u0103 adrese 200.124.22.1 200.124.22.2, dar le pute\u021bi schimba sau ad\u0103uga adrese noi, nelegate de o interfa\u021b\u0103 specific\u0103. <\/p>\n<p>Trebuie s\u0103 te asiguri c\u0103 tabelul t\u0103u de rutare s-a actualizat astfel \u00eenc\u00e2t oricare dintre aceste adrese IP din pool s\u0103 fie direc\u021bionate c\u0103tre acest dispozitiv, altfel nu vei primi trafic de \u00eentoarcere. Pentru a verifica dac\u0103 set\u0103rile func\u021bioneaz\u0103, vom repeta procedura de pingare a router-ului cloud, pe care am efectuat-o pentru NAT static. Voi deschide fereastra router-ului Router 1 pentru a vedea mesajele \u00een modul de depanare \u0219i voi face ping de la fiecare dintre cele 3 dispozitive.<\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/b768b7208a21f1eefe8893394f6e538b.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVedem c\u0103 toate adresele surselor de unde vin pachetele de ping corespund set\u0103rilor. Cu toate acestea, ping-ul de la computerul PC0 nu trece, deoarece nu i-a fost suficient\u0103 o adres\u0103 extern\u0103 liber\u0103. Dac\u0103 ne uit\u0103m la set\u0103rile Router 1, vedem c\u0103 \u00een acest moment sunt folosite adresele pool-ului 200.124.22.1 \u0219i 200.124.22.2. Acum voi dezactiva traducerea \u0219i ve\u021bi vedea cum liniile dispar una c\u00e2te una. Relansez ping-ul de la computerul PC0 \u0219i, dup\u0103 cum vede\u021bi, acum totul func\u021bioneaz\u0103, deoarece a reu\u0219it s\u0103 ob\u021bin\u0103 adresa extern\u0103 liber\u0103 200.124.22.1. <\/p>\n<p>Cum se poate cur\u0103\u021ba tabelul NAT \u0219i anula transforma\u021bia de adrese specificat\u0103? Intr\u0103m \u00een set\u0103rile router-ului Router0 \u0219i tast\u0103m comanda clear ip nat translation * cu \"steaua\" la sf\u00e2r\u0219itul liniei. Dac\u0103 acum ne uit\u0103m la starea transforma\u021biei folosind comanda show ip nat translation, sistemul ne va oferi un \u0219ir gol. <\/p>\n<p>Pentru vizualizarea statisticilor NAT se folose\u0219te comanda show ip nat statistics. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/edf20f51bdabbe9d7a62c538c1155470.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAceasta este o comand\u0103 foarte util\u0103, datorit\u0103 c\u0103reia pute\u021bi afla num\u0103rul total de transform\u0103ri NAT\/PAT dinamice, statice \u0219i extinse. Vede\u021bi c\u0103 acesta este 0, deoarece am \u0219ters datele de transla\u021bie cu comanda anterioar\u0103. Aici sunt afi\u0219ate interfe\u021bele de intrare \u0219i ie\u0219ire, num\u0103rul de transform\u0103ri reu\u0219ite \u0219i e\u0219uate (num\u0103rul de e\u0219ecuri este legat de lipsa unei adrese externe libere pentru un gazd\u0103 intern\u0103), numele listei de acces \u0219i al grupului. <\/p>\n<p>Acum vom trece la cel mai popular tip de transformare a adreselor IP \u2013 NAT extins sau PAT. Pentru a configura PAT, trebuie s\u0103 efectua\u021bi acelea\u0219i etape ca \u0219i pentru configurarea NAT dinamic: s\u0103 defini\u021bi interfe\u021bele de intrare \u0219i ie\u0219ire ale routerului, s\u0103 identifica\u021bi traficul \u201einteresant\u201d, s\u0103 crea\u021bi un grup NAT \u0219i s\u0103 configura\u021bi PAT. Putem crea un grup similar din mai multe adrese, ca \u0219i \u00een cazul anterior, dar nu este necesar, deoarece \u00een PAT se folose\u0219te \u00een permanen\u021b\u0103 aceea\u0219i adres\u0103 extern\u0103. Diferen\u021ba dintre configurarea NAT dinamic \u0219i PAT const\u0103 doar \u00een cuv\u00e2ntul cheie overload, cu care se \u00eencheie ultima comand\u0103 de configurare. Dup\u0103 introducerea acestui cuv\u00e2nt, NAT dinamic se transform\u0103 automat \u00een PAT.<\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/d372483678c9f08c33caf1eb9c8046a2.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n\u00cen plus, folositi doar o adres\u0103 \u00een grupul NWKING, de exemplu, 200.124.22.1, dar o indica\u021bi de dou\u0103 ori ca adres\u0103 extern\u0103 de \u00eenceput \u0219i de sf\u00e2r\u0219it cu masca de re\u021bea 255.255.255.0. Se poate proceda mai simplu, folosind \u00een locul liniei ip nat 1 pool NWKING 200.124.22.1 200.124.22.1 netmask 255.255.255.0 parametrul source interface \u0219i adresa fix\u0103 200.124.22.1 a interfe\u021bei G0\/1. \u00cen acest caz, toate adresele locale vor fi transformate \u00een acest IP atunci c\u00e2nd acceseaz\u0103 internetul. <\/p>\n<p>De asemenea, pute\u021bi folosi orice alt\u0103 adres\u0103 IP \u00een grup, nu neap\u0103rat corespunz\u0103toare unui interfa\u021b\u0103 fizic\u0103 specific. Cu toate acestea, \u00een acest caz trebuie s\u0103 v\u0103 asigura\u021bi c\u0103 toate routerele din re\u021bea pot direc\u021biona traficul de r\u0103spuns c\u0103tre dispozitivul ales de dvs. Un dezavantaj al NAT este c\u0103 nu poate fi utilizat pentru adresare end-to-end, deoarece, p\u00e2n\u0103 c\u00e2nd pachetul de r\u0103spuns se \u00eentoarce la dispozitivul local, adresa IP NAT dinamic poate fi schimbat\u0103. Adic\u0103 trebuie s\u0103 fi\u021bi siguri c\u0103 adresa IP aleas\u0103 va r\u0103m\u00e2ne disponibil\u0103 pe \u00eentreaga durat\u0103 a sesiunii de comunica\u021bie. <\/p>\n<p>S\u0103 ne uit\u0103m la asta prin Packet Tracer. Mai \u00eent\u00e2i, trebuie s\u0103 \u0219terg NAT-ul dinamic cu comanda no Ip nat inside source list 1 NWKING \u0219i s\u0103 \u0219terg pool-ul NAT cu comanda no Ip nat pool NWKING 200.124.22.1 200.124.22.2 netmask 255.255.255.252. <\/p>\n<p>Apoi, trebuie s\u0103 creez un pool PAT cu comanda Ip nat pool NWKING 200.124.22.2 200.124.22.2 netmask 255.255.255.255. De data aceasta, folosesc o adres\u0103 IP care nu apar\u021bine dispozitivului fizic, deoarece dispozitivul fizic are adresa 200.124.22.1 \u0219i vreau s\u0103 folosesc 200.124.22.2. \u00cen cazul nostru, acest lucru func\u021bioneaz\u0103, deoarece avem o re\u021bea local\u0103.<\/p>\n<p>Apoi, configurez PAT cu comanda Ip nat inside source list 1 pool NWKING overload. Dup\u0103 introducerea acestei comenzi, activ\u0103m conversia adreselor PAT. Pentru a verifica corectitudinea configur\u0103rii, m\u0103 duc la dispozitivele noastre, server \u0219i dou\u0103 calculatoare, \u0219i fac ping de la calculatorul PC0 c\u0103tre Router1 la adresa 200.124.22.10. \u00cen fereastra de set\u0103ri a routerului, se v\u0103d liniile de depanare care arat\u0103 c\u0103 sursa ping-ului, a\u0219a cum ne a\u0219teptam, este adresa IP 200.124.22.2. De pe aceea\u0219i adres\u0103 vine ping-ul trimis de calculatorul PC1 \u0219i serverul Server0. <\/p>\n<p>S\u0103 vedem ce se \u00eent\u00e2mpl\u0103 \u00een tabelul de conversie al routerului Router0. Vede\u021bi c\u0103 toate conversiile sunt reu\u0219ite, fiec\u0103rui dispozitiv i se atribuie propriul port, iar toate adresele locale sunt legate de Router1 prin adresa IP a pool-ului 200.124.22.2. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/aa051ee41e877926d9b0313af7c75355.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nFolosesc comanda show ip nat statistics pentru a vizualiza statisticile PAT. <\/p>\n<p><img decoding=\"async\" alt=\"Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT\" src=\"\/wp-content\/uploads\/2019\/09\/db763aa0c579d1c0d0759b6081b00847.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nVedem c\u0103 num\u0103rul total de conversii, sau transla\u021bii de adrese, este 12, putem vedea caracteristicile pool-ului \u0219i alte informa\u021bii. <\/p>\n<p>Acum mai fac ceva \u2014 introduc comanda Ip nat inside source list 1 interface gigabit Ethernet g0\/1 overload. Dac\u0103 dup\u0103 asta fac ping la router de pe calculatorul PC0, se vede c\u0103 pachetul a venit de la adresa 200.124.22.1, adic\u0103 de la interfa\u021ba fizic\u0103! Acesta este un mod mai simplu: dac\u0103 nu dori\u021bi s\u0103 crea\u021bi un pool, ceea ce se \u00eent\u00e2mpl\u0103 cel mai des la utilizarea routerelor de acas\u0103, pute\u021bi folosi ca adres\u0103 NAT extern\u0103 adresa IP a interfe\u021bei fizice a routerului. A\u0219a se \u00eent\u00e2mpl\u0103 cel mai des conversia adresei gazdei private pentru re\u021beaua public\u0103. <br \/>\nAst\u0103zi am studiat o tem\u0103 foarte important\u0103, a\u0219a c\u0103 este necesar s\u0103 exersa\u021bi \u00een acest domeniu. Folosi\u021bi Packet Tracer pentru a v\u0103 verifica cuno\u0219tin\u021bele teoretice \u00een solu\u021bionarea problemelor practice legate de configurarea NAT \u0219i PAT. Am ajuns la finalul studiului tematicii ICND1 \u2013 primul examen al cursului CCNA, a\u0219a c\u0103 urm\u0103torul videoclip voi dedica probabil unui rezumat. <\/p>\n<p><center><div class=\"youtube-placeholder\" data-id=\"l5wuJFoeVDQ\" onclick=\"loadVideo(this)\">\r\n        <img decoding=\"async\" src=\"https:\/\/img.youtube.com\/vi\/l5wuJFoeVDQ\/hqdefault.jpg\" alt=\"Reda\u021bi video\" loading=\"lazy\" width=\"480\" height=\"360\" style=\"width:100%;height:auto;\">\r\n        <div class=\"play-button\"><\/div>\r\n    <\/div><\/center><br \/>\nV\u0103 mul\u021bumim c\u0103 r\u0103m\u00e2ne\u021bi cu noi. V\u0103 plac articolele noastre? Dori\u021bi s\u0103 vede\u021bi mai multe materiale interesante? Sus\u021bine\u021bi-ne f\u0103c\u00e2nd o comand\u0103 sau recomand\u00e2ndu-ne prietenilor. <b>30% reducere pentru utilizatorii Habr pentru un server entry-level unic, creat special pentru tine:<\/b> <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/ua-hosting\/blog\/347386\/\">Adev\u0103rul despre VPS (KVM) E5-2650 v4 (6 nuclee) 10GB DDR4 240GB SSD 1Gbps de la 20$ sau cum s\u0103 \u00eemp\u0103r\u021bim corect un server?<\/a><\/noindex> (sunt disponibile op\u021biuni cu RAID1 \u0219i RAID10, p\u00e2n\u0103 la 24 nuclee \u0219i p\u00e2n\u0103 la 40GB DDR4).<\/p>\n<p><b>Dell R730xd la jum\u0103tate de pre\u021b?<\/b> Numai la noi <b><noindex><a rel=\"nofollow\" href=\"https:\/\/ua-hosting.company\/serversnl\">2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TB de la 199 $<\/a><\/noindex> \u00een Olanda! <b>Dell R420 \u2014 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB \u2014 de la 99 $!<\/b><\/b> Citi\u021bi despre <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/company\/ua-hosting\/blog\/329618\/\">Cum s\u0103 construi\u021bi o infrastructur\u0103 de clas\u0103 enterprise folosind servere Dell R730xd E5-2650 v4 la pre\u021buri foarte mici de 9000 \u20ac?<\/a><\/noindex><br \/>\n<br \/>Sursa: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/ua-hosting\/blog\/465789\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0438\u0437\u0443\u0447\u0430\u0442\u044c PAT (Port Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 IP- \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0440\u0442\u043e\u0432, \u0438 NAT (Network Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. PAT \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u043c \u0441\u043b\u0443\u0447\u0430\u0435\u043c NAT. \u041c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0442\u0440\u0438 \u0442\u0435\u043c\u044b: \u2014 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435, \u0438\u043b\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 (\u0432\u043d\u0443\u0442\u0440\u0438\u0441\u0435\u0442\u0435\u0432\u044b\u0435, \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435) IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435, \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430; \u2014 NAT \u0438 PAT; \u2014 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 NAT\/ PAT. \u041d\u0430\u0447\u043d\u0435\u043c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28314,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37723","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2.1 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0438\u0437\u0443\u0447\u0430\u0442\u044c PAT (Port Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 IP- \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0440\u0442\u043e\u0432, \u0438 NAT (Network Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2.1\" \/>\n\t\t<meta property=\"og:locale\" content=\"ro_RO\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u0422\u0440\u0435\u043d\u0438\u043d\u0433 Cisco 200-125 CCNA v3.0. \u0414\u0435\u043d\u044c 29. PAT \u0438 NAT | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0438\u0437\u0443\u0447\u0430\u0442\u044c PAT (Port Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 IP- \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0440\u0442\u043e\u0432, \u0438 NAT (Network Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2019-10-31T19:19:20+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2019-10-31T19:19:20+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Antrenament Cisco 200-125 CCNA v3.0. Ziua 29. PAT \u0219i NAT | ProHoster","description":"Ast\u0103zi vom studia PAT (Traducere Adres\u0103 Port), tehnologia de traducere a adreselor IP prin utilizarea porturilor, \u0219i NAT (Traducere Adres\u0103 Re\u021bea), tehnologia de transformare a adreselor IP ale pachetelor de tranzit.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0422\u0440\u0435\u043d\u0438\u043d\u0433 Cisco 200-125 CCNA v3.0. \u0414\u0435\u043d\u044c 29. PAT \u0438 NAT | ProHoster","og:description":"\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0438\u0437\u0443\u0447\u0430\u0442\u044c PAT (Port Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 IP- \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0440\u0442\u043e\u0432, \u0438 NAT (Network Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/ro\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:19:20+00:00","article:modified_time":"2019-10-31T19:19:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37723","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 19:02:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:22:28","updated":"2026-01-23 19:02:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37723","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=37723"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/37723\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/28314"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=37723"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=37723"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=37723"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}