{"id":37723,"date":"2019-10-31T22:19:20","date_gmt":"2019-10-31T19:19:20","guid":{"rendered":"https:\/\/prohoster.info\/blog\/trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat\/"},"modified":"2019-10-31T22:19:20","modified_gmt":"2019-10-31T19:19:20","slug":"trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat","title":{"rendered":"Trajnimi Cisco 200-125 CCNA v3.0. Dita 29. PAT dhe NAT","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Sot mund t\u00eb m\u00ebsojm\u00eb p\u00ebr PAT (Translacioni i Adresave t\u00eb Portit), nj\u00eb teknologji p\u00ebr translacionin e adresave IP duke p\u00ebrdorur porte, dhe NAT (Translacioni i Adresave t\u00eb Rrjetit), nj\u00eb teknologji p\u00ebr transformimin e adresave IP t\u00eb paketave kaluese. PAT \u00ebsht\u00eb nj\u00eb rast special i NAT. Ne do t\u00eb shqyrtojm\u00eb tri tema: <\/p>\n

\u2014 adresat IP private, ose t\u00eb brendshme (t\u00eb rrjetit lokal), dhe adresat IP publike, ose t\u00eb jashtme;
\n \u2014 NAT dhe PAT;
\n \u2014 konfigurimi i NAT\/PAT.<\/p>\n

T\u00eb fillojm\u00eb me adresat private IP. E dim\u00eb se ato ndahen n\u00eb tri klasa: A, B dhe C. <\/p>\n

\"Trajnimi
\n
\nAdresat e brendshme t\u00eb klas\u00ebs A mbulojn\u00eb gam\u00ebn \"dhjet\u00eb\" nga 10.0.0.0 deri n\u00eb 10.255.255.255, nd\u00ebrsa t\u00eb jashtmet mbulojn\u00eb gam\u00ebn nga 1.0.0.0 deri n\u00eb 9.255.255.255 dhe nga 11.0.0.0 deri n\u00eb 126.255.255.255. <\/p>\n

Adresat e brendshme t\u00eb klas\u00ebs B mbulojn\u00eb gam\u00ebn nga 172.16.0.0 deri n\u00eb 172.31.255.255, nd\u00ebrsa t\u00eb jashtmet\u2014nga 128.0.0.0 deri n\u00eb 172.15.255.255 dhe nga 172.32.0.0 deri n\u00eb 191.255.255.255.<\/a><\/noindex><\/p>\n

Adresat e brendshme t\u00eb klas\u00ebs C mbulojn\u00eb gam\u00ebn nga 192.168.0.0 deri n\u00eb 192.168.255.255, nd\u00ebrsa t\u00eb jashtmet\u2014nga 192.0.0.0 deri n\u00eb 192.167.255.255 dhe nga 192.169.0.0 deri n\u00eb 223.255.255.255.<\/p>\n

\"Trajnimi
\n
\nAdresat e klas\u00ebs A jan\u00eb adresat \/8, klas\u00ebs B \u2014 \/12 dhe klas\u00ebs C \u2014 \/16. Pra, adresat IP t\u00eb ndryshme klasash z\u00ebn\u00eb gam\u00eb t\u00eb ndryshme. <\/p>\n

Ne kemi biseduar disa her\u00eb p\u00ebr diferenc\u00ebn midis adresave IP private dhe publike. N\u00eb p\u00ebrgjith\u00ebsi, n\u00ebse kemi nj\u00eb router dhe nj\u00eb grup adresash IP t\u00eb brendshme, kur ato p\u00ebrpiqen t\u00eb dalin n\u00eb internet, router-i i konverton ato n\u00eb adresat IP t\u00eb jashtme. Adresat e brendshme p\u00ebrdoren vet\u00ebm n\u00eb rrjetet lokale, e jo n\u00eb internet. <\/p>\n

N\u00ebse p\u00ebrdor komand\u00ebn e linj\u00ebs p\u00ebr t\u00eb par\u00eb parametrat e rrjetit t\u00eb kompjuterit tim, do t\u00eb shoh adres\u00ebn time t\u00eb brendshme LAN 192.168.1.103.<\/p>\n

\"Trajnimi
\n
\nP\u00ebr t\u00eb ditur adres\u00ebn time publike IP, mund t\u00eb p\u00ebrdor nj\u00eb sh\u00ebrbim n\u00eb internet si \"Cili \u00ebsht\u00eb IP im?\" Si\u00e7 e shihni, adresa e jashtme e kompjuterit \u00ebsht\u00eb 78.100.196.163 q\u00eb \u00ebsht\u00eb ndryshe nga adresa e tij e brendshme. <\/p>\n

\"Trajnimi
\n
\nN\u00eb t\u00eb gjitha rastet, kompjuteri im \u00ebsht\u00eb i duksh\u00ebm n\u00eb internet pik\u00ebrisht me adres\u00ebn IP t\u00eb jashtme. Pra, adresa e brendshme e kompjuterit tim \u00ebsht\u00eb 192.168.1.103, nd\u00ebrsa ajo e jashtme \u2014 78.100.196.163. Adresa e brendshme p\u00ebrdoret vet\u00ebm p\u00ebr komunikim lokal, s'mund t\u00eb dal\u00ebsh n\u00eb internet me t\u00eb, p\u00ebr k\u00ebt\u00eb t\u00eb nevojitet nj\u00eb adres\u00eb IP publike. Mund t\u00eb kujtoni se p\u00ebr \u00e7far\u00eb ishte b\u00ebr\u00eb ndarja e adresave n\u00eb private dhe publike duke rishikuar video m\u00ebsimin Dit\u00ebn 3. <\/p>\n

T\u00eb shohim se \u00e7far\u00eb \u00ebsht\u00eb NAT. Ekzistojn\u00eb tri lloje NAT: NAT statik, NAT dinamik dhe NAT \"i ngarkuar\", ose PAT.<\/p>\n

\"Trajnimi
\n
\nN\u00eb Cisco ekzistojn\u00eb 4 terma q\u00eb p\u00ebrshkruajn\u00eb NAT. Si\u00e7 e thash\u00eb, NAT \u00ebsht\u00eb nj\u00eb mekaniz\u00ebm q\u00eb konverton adresat e brendshme n\u00eb ato t\u00eb jashtme. N\u00ebse nj\u00eb pajisje e lidhur n\u00eb internet merr nj\u00eb paket\u00eb nga nj\u00eb pajisje tjet\u00ebr n\u00eb rrjetin lokal, ajo thjesht do ta hedhin k\u00ebt\u00eb paket\u00eb, pasi formati i adres\u00ebs s\u00eb brendshme nuk p\u00ebrputhet me formatin e adresave t\u00eb p\u00ebrdorura n\u00eb rrjetin global t\u00eb internetit. Prandaj, pajisja duhet t\u00eb marr\u00eb nj\u00eb adres\u00eb IP publike p\u00ebr t\u00eb dal\u00eb n\u00eb internet.
\nPra, termini i par\u00eb \u00ebsht\u00eb Inside Local, q\u00eb do t\u00eb thot\u00eb adresa IP e hostit n\u00eb rrjetin e brendsh\u00ebm, lokal. Thjesht, kjo \u00ebsht\u00eb adresa fillestare e burimit si 192.168.1.10. Termi i dyt\u00eb, Inside Global, \u00ebsht\u00eb adresa IP e hostit lokal, n\u00ebn t\u00eb cilin ai shihet n\u00eb rrjetin e jasht\u00ebm. N\u00eb rastin ton\u00eb, kjo \u00ebsht\u00eb adresa IP e portit t\u00eb jasht\u00ebm t\u00eb router-it 200.124.22.10.<\/p>\n

\"Trajnimi
\n
\nMund t\u00eb thuhet se Inside Local \u00ebsht\u00eb nj\u00eb adres\u00eb IP private, nd\u00ebrsa Inside Global \u00ebsht\u00eb nj\u00eb adres\u00eb IP publike. Mbani mend se termi Inside p\u00ebrdoret n\u00eb lidhje me burimin e trafik, nd\u00ebrsa Outside p\u00ebrdoret p\u00ebr shkak t\u00eb destinacionit t\u00eb trafik. Outside Local \u00ebsht\u00eb adresa IP e hostit n\u00eb rrjetin e jasht\u00ebm, n\u00ebn t\u00eb cilin ai shihet nga rrjeti i brendsh\u00ebm. Thjesht, kjo \u00ebsht\u00eb adresa e marr\u00ebsit, e dukshme nga rrjeti i brendsh\u00ebm. Nj\u00eb shembull i till\u00eb adrese \u00ebsht\u00eb adresa IP 200.124.22.100 e nj\u00eb pajisjeje q\u00eb ndodhet n\u00eb internet. <\/p>\n

\"Trajnimi
\n
\nOutside Global \u00ebsht\u00eb adresa IP e hostit, e dukshme n\u00eb rrjetin e jasht\u00ebm. N\u00eb shumic\u00ebn e rasteve, adresat Outside Local dhe Outside Global duken t\u00eb nj\u00ebjta, sepse edhe pas konvertimit adresa IP e destinacionit duket p\u00ebr burimin e till\u00eb si\u00e7 ishte para konvertimit. <\/p>\n

\"Trajnimi
\n
\nLe t\u00eb shqyrtojm\u00eb se \u00e7far\u00eb p\u00ebrfaq\u00ebson NAT statik. NAT statik do t\u00eb thot\u00eb nj\u00eb konvertim p\u00ebrkat\u00ebs i adresave IP t\u00eb brendshme n\u00eb ato t\u00eb jashtme, ose nj\u00eb konvertim \"nj\u00eb p\u00ebr nj\u00eb\". Kur pajisjet d\u00ebrgojn\u00eb trafik n\u00eb Internet, adresat e tyre t\u00eb brendshme Inside Local konvertohen n\u00eb adresat e brendshme Inside Global.<\/p>\n

\"Trajnimi
\n
\nN\u00eb rrjetin ton\u00eb lokal ka 3 pajisje, dhe kur ato d\u00ebshirojn\u00eb t\u00eb dalin n\u00eb Internet, secila prej tyre merr adres\u00ebn e saj Inside Global. K\u00ebto adresa jan\u00eb statikisht t\u00eb caktuara p\u00ebr burimet e trafik. Parimi \"nj\u00eb p\u00ebr nj\u00eb\" do t\u00eb thot\u00eb se n\u00ebse n\u00eb rrjetin lokal ka 100 pajisje, ato marrin 100 adresa t\u00eb jashtme. <\/p>\n

NAT u shfaq si nj\u00eb zgjidhje p\u00ebr t\u00eb shp\u00ebtuar Internetin, ku IP-t\u00eb publik kishin p\u00ebrfunduar. Fal\u00eb NAT-it, shum\u00eb kompani dhe shum\u00eb rrjete mund t\u00eb ken\u00eb nj\u00eb adres\u00eb IP t\u00eb jashtme t\u00eb p\u00ebrbashk\u00ebt, n\u00eb t\u00eb cil\u00ebn adresat lokale t\u00eb pajisjeve do t\u00eb transformohen kur dalin n\u00eb Internet. Ju mund t\u00eb thoni se n\u00eb k\u00ebt\u00eb rast nuk ka asnj\u00eb kursim t\u00eb numrit t\u00eb adresave p\u00ebr NAT-in statik, pasi nj\u00ebqind kompjuter\u00ebve lokal\u00eb u jepet nj\u00ebqind adresa t\u00eb jashtme, dhe do t\u00eb jeni plot\u00ebsisht t\u00eb sakt\u00eb. Megjithat\u00eb, NAT-i statik ka ende disa p\u00ebrpar\u00ebsi.<\/p>\n

P\u00ebr shembull, kemi nj\u00eb server me adres\u00ebn e brendshme IP 192.168.1.100. N\u00ebse ndonj\u00eb pajisje nga Interneti d\u00ebshiron t\u00eb lidhet me t\u00eb, ajo nuk do t\u00eb mund ta b\u00ebj\u00eb k\u00ebt\u00eb duke p\u00ebrdorur adres\u00ebn e brendshme, por do t'i duhet t\u00eb p\u00ebrdor\u00eb adres\u00ebn e jashtme t\u00eb serverit 200.124.22.3. N\u00ebse router-i \u00ebsht\u00eb konfigururar me NAT statik, i gjith\u00eb trafiku q\u00eb adreson 200.124.22.3 automatikisht redirektohet n\u00eb 192.168.1.100. S\u00eb k\u00ebndejmi, sigurohet akses i jasht\u00ebm n\u00eb pajisjet e rrjetit lokal, n\u00eb k\u00ebt\u00eb rast n\u00eb serverin web t\u00eb kompanis\u00eb, q\u00eb mund t\u00eb jet\u00eb e nevojshme n\u00eb raste t\u00eb ve\u00e7anta. <\/p>\n

Le t\u00eb shqyrtojm\u00eb NAT dinamik. Ai \u00ebsht\u00eb shum\u00eb i ngjash\u00ebm me NAT statik, por nuk i jep adresa t\u00eb jashtme t\u00eb p\u00ebrhershme \u00e7do pajisjeje lokale. P\u00ebr shembull, kemi 3 pajisje lokale dhe vet\u00ebm 2 adresa t\u00eb jashtme. N\u00ebse pajisja e dyt\u00eb d\u00ebshiron t\u00eb dal\u00eb n\u00eb Internet, ajo do t'i jepet adresa e par\u00eb e lir\u00eb IP. N\u00ebse pas saj, serveri web d\u00ebshiron t\u00eb dal\u00eb n\u00eb Internet, router-i do t'i jep\u00eb atij adres\u00ebn e dyt\u00eb t\u00eb jashtme t\u00eb disponueshme. N\u00ebse pas k\u00ebsaj pajisja e par\u00eb d\u00ebshiron t\u00eb dal\u00eb n\u00eb rrjetin e jasht\u00ebm, p\u00ebr t\u00eb nuk do t\u00eb ket\u00eb adres\u00eb IP t\u00eb disponueshme, dhe router-i do t\u00eb hedh\u00eb paket\u00ebn e saj. <\/p>\n

\"Trajnimi
\n
\nNe mund t\u00eb kemi nj\u00ebqind pajisje me adresat e brendshme IP, dhe \u00e7do nj\u00eb nga k\u00ebto pajisje mund t\u00eb dal\u00eb n\u00eb Internet. Por, p\u00ebr shkak se nuk kemi nj\u00eb caktim statik t\u00eb adresave t\u00eb jashtme, nj\u00ebkoh\u00ebsisht n\u00eb Internet mund t\u00eb dalin jo m\u00eb shum\u00eb se 2 pajisje nga nj\u00ebqind, sepse kemi vet\u00ebm dy adresa t\u00eb jashtme q\u00eb caktohen dinamikisht. <\/p>\n

N\u00eb pajisjet Cisco, koha fikse e transformimit t\u00eb adresave \u00ebsht\u00eb 24 or\u00eb, e cila mund t\u00eb ndryshohet n\u00eb 1, 2, 3, 10 minuta ose n\u00eb \u00e7do koh\u00eb q\u00eb d\u00ebshironi. Pas kalimit t\u00eb k\u00ebsaj kohe, adresat ekstern\u00eb lirohen dhe kthehen automatikisht n\u00eb pool-in e adresave. N\u00ebse n\u00eb k\u00ebt\u00eb moment pajisja e par\u00eb d\u00ebshiron t\u00eb dal\u00eb n\u00eb internet dhe ndonj\u00eb adres\u00eb ekstern\u00eb \u00ebsht\u00eb e aksesueshme, ajo do ta marr\u00eb at\u00eb. Routeri p\u00ebrmban nj\u00eb tabel\u00eb NAT, e cila p\u00ebrdit\u00ebsohet dinamikisht, dhe derisa koha e transformimit t\u00eb mos ket\u00eb skaduar, adresa e caktuar ruhet p\u00ebr pajisjen. N\u00eb terma m\u00eb t\u00eb thjesht\u00eb, NAT dinamik funksionon mbi parimin: \"ata q\u00eb kan\u00eb ardhur t\u00eb par\u00ebt, sh\u00ebrbehen t\u00eb par\u00ebt.\" <\/p>\n

Le t\u00eb shqyrtojm\u00eb se \u00e7far\u00eb p\u00ebrfaq\u00ebson NAT-i i ngarkuar, ose PAT. Ky \u00ebsht\u00eb tipi m\u00eb i zakonsh\u00ebm i NAT-it. N\u00eb rrjetin tuaj sht\u00ebpiak mund t\u00eb ket\u00eb shum\u00eb pajisje \u2013 PC, smartphone, laptop, tablet, dhe t\u00eb gjitha ato lidhen me nj\u00eb router, i cili ka nj\u00eb adres\u00eb IP t\u00eb jashtme. PAT-i lejon shum\u00eb pajisje me adresa IP t\u00eb brendshme t\u00eb dalin n\u00eb internet n\u00ebn nj\u00eb adres\u00eb IP t\u00eb jashtme. Kjo \u00ebsht\u00eb e mundur sepse \u00e7do adres\u00eb IP private, e brendshme p\u00ebrdor nj\u00eb num\u00ebr porti t\u00eb caktuar gjat\u00eb sesionit t\u00eb komunikimit.
\nSupozoni se kemi nj\u00eb adres\u00eb publike 200.124.22.1 dhe shum\u00eb pajisje lokale. T\u00eb gjitha k\u00ebto hoste do t\u00eb marrin t\u00eb nj\u00ebjt\u00ebn adres\u00eb 200.124.22.1 kur dalin n\u00eb internet. E vetmja gj\u00eb q\u00eb do t'i dallonte nga nj\u00ebri-tjetri \u00ebsht\u00eb numri i portit.
\nN\u00ebse e mbani mend diskutimin mbi nivelin e transportit, e dini se niveli i transportit p\u00ebrmban numra portesh, ku numri i portit t\u00eb burimit p\u00ebrb\u00ebn nj\u00eb num\u00ebr rast\u00ebsor. <\/p>\n

\"Trajnimi
\n
\nSupozoni se n\u00eb rrjetin e jasht\u00ebm ka nj\u00eb host me adres\u00eb IP 200.124.22.10, i cili \u00ebsht\u00eb i lidhur me internetin. N\u00ebse kompjuteri 192.168.1.11 d\u00ebshiron t\u00eb komunikoj\u00eb me kompjuterin 200.124.22.10, ai do t\u00eb krijoj\u00eb nj\u00eb port t\u00eb rast\u00ebsish\u00ebm burimi 51772. Nd\u00ebrkoh\u00eb porti i caktuar i kompjuterit n\u00eb rrjetin e jasht\u00ebm do t\u00eb jet\u00eb 80. <\/p>\n

Kur routeri t\u00eb marr\u00eb paket\u00ebn nga kompjuteri lokal, e cila \u00ebsht\u00eb drejtuar n\u00eb rrjetin e jasht\u00ebm, ai p\u00ebrkthen adres\u00ebn lokale Inside Local n\u00eb adres\u00ebn Inside Global 200.124.22.1 dhe i cakton portit numrin 23556. Paketa do t\u00eb arrij\u00eb n\u00eb kompjuterin 200.124.22.10, dhe ai duhet t\u00eb d\u00ebrgoj\u00eb p\u00ebrs\u00ebri nj\u00eb p\u00ebrgjigje sipas procedur\u00ebs s\u00eb dor\u00ebzimit, ku adresa do t\u00eb jet\u00eb 200.124.22.1 dhe porti 23556. <\/p>\n

Ruterka ka nj\u00eb tabel\u00eb t\u00eb p\u00ebrkthimit NAT, k\u00ebshtu q\u00eb, duke marr\u00eb nj\u00eb paket\u00eb nga nj\u00eb kompjuter i jasht\u00ebm, do t\u00eb p\u00ebrcaktoj\u00eb adres\u00ebn Inside Local, p\u00ebrkat\u00ebse me adres\u00ebn Inside Global si 192.168.1.11: 51772, dhe do t'i d\u00ebrgoj\u00eb paket\u00ebn. Pas k\u00ebsaj, lidhja midis dy kompjuter\u00ebve mund t\u00eb konsiderohet e vendosur.
\nN\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, mund t\u00eb keni nj\u00ebqind pajisje q\u00eb p\u00ebrdorin t\u00eb nj\u00ebjt\u00ebn adres\u00eb 200.124.22.1 p\u00ebr komunikim, por me numra t\u00eb ndrysh\u00ebm portesh, gj\u00eb q\u00eb i lejon ata t\u00eb dalin t\u00eb gjith\u00eb n\u00eb internet nj\u00ebkoh\u00ebsisht. Kjo \u00ebsht\u00eb arsyeja pse PAT \u00ebsht\u00eb nj\u00eb metod\u00eb kaq e njohur e p\u00ebrkthimit.<\/p>\n

Le t\u00eb shqyrtojm\u00eb konfigurimin e NAT statik. P\u00ebr \u00e7do rrjet, s\u00eb pari duhet t\u00eb p\u00ebrcaktohen nd\u00ebrfaqet hyr\u00ebse dhe dal\u00ebse. N\u00eb diagram paraqitet ruterja p\u00ebrmes t\u00eb cil\u00ebs kalon trafiku nga porta G0\/0 n\u00eb port\u00ebn G0\/1, pra nga rrjeti i brendsh\u00ebm n\u00eb rrjetin e jasht\u00ebm. K\u00ebshtu, kemi nj\u00eb nd\u00ebrfaqe hyr\u00ebse 192.168.1.1 dhe nj\u00eb nd\u00ebrfaqe dal\u00ebse 200.124.22.1. <\/p>\n

\"Trajnimi
\n
\nP\u00ebr t\u00eb konfiguruar NAT, ne kalojm\u00eb n\u00eb nd\u00ebrfaqen G0\/0 dhe vendosim parametrat ip addres 192.168.1.1 255.255.255.0 dhe tregojm\u00eb se kjo nd\u00ebrfaqe \u00ebsht\u00eb hyr\u00ebse, duke p\u00ebrdorur komand\u00ebn ip nat inside. <\/p>\n

\"Trajnimi
\n
\nN\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme, ne konfigurim NAT n\u00eb nd\u00ebrfaqen dal\u00ebse G0\/1, duke treguar ip address 200.124.22.1, mask\u00ebn e n\u00ebndeh\u00ebs 255.255.255.0 dhe ip nat outside. Mbani mend se konvertimi i NAT dinamik gjithmon\u00eb b\u00ebhet nga nd\u00ebrfaqja hyr\u00ebse n\u00eb at\u00eb dal\u00ebse, nga inside n\u00eb outside. Sigurisht, p\u00ebr NAT dinamik, p\u00ebrgjigjja kthehet n\u00eb nd\u00ebrfaqen hyr\u00ebse p\u00ebrmes asaj dal\u00ebse, por kur niset trafiku, veprohet drejtimi in-out. N\u00eb rastin e NAT statik, nisja e trafikut mund t\u00eb ndodh\u00eb n\u00eb \u00e7far\u00ebdo drejtimi \u2013 in-out ose out-in. <\/p>\n

Pastaj, na nevojitet t\u00eb p\u00ebrgatisim tabel\u00ebn e NAT statik, ku \u00e7do adres\u00eb lokale i korrespondon nj\u00eb adres\u00eb globale t\u00eb ve\u00e7ant\u00eb. N\u00eb rastin ton\u00eb, kemi 3 pajisje, k\u00ebshtu q\u00eb tabela do t\u00eb p\u00ebrb\u00ebhet nga 3 regjistra, n\u00eb t\u00eb cilat p\u00ebrmendet IP-adresa Inside Local t\u00eb burimit, e cila konvertohet n\u00eb adres\u00ebn Inside Global: ip nat inside static 192.168.1.10 200.124.22.1.
\nK\u00ebshtu, n\u00eb NAT statik, ju manualisht shkruani konvertimin p\u00ebr secil\u00ebn adres\u00eb t\u00eb hostit lokal. Tani do t\u00eb kaloj n\u00eb Packet Tracer dhe do t\u00eb b\u00ebj konfigurimet e p\u00ebrshkruara m\u00eb sip\u00ebr. <\/p>\n

\"Trajnimi
\n
\nN\u00eb maj\u00eb ndodhet serveri 192.168.1.100, posht\u00eb \u00ebsht\u00eb kompjuteri 192.168.1.10 dhe n\u00eb fund \u00ebsht\u00eb kompjuteri 192.168.1.11. Porta G0\/0 e router-it Router0 ka adres\u00ebn IP 192.168.1.1, nd\u00ebrsa porta G0\/1 \u2013 200.124.22.1. N\u00eb \"cloud\", q\u00eb p\u00ebrfaq\u00ebson internetin, kam vendosur Router1, t\u00eb cilit i kam caktuar adres\u00ebn IP 200.124.22.10.<\/p>\n

Hyr n\u00eb cil\u00ebsimet e Router1 dhe shkruaj komand\u00ebn debug ip icmp. Tani, sa her\u00eb q\u00eb ping-u arrin n\u00eb k\u00ebt\u00eb pajisje, n\u00eb dritaren e cil\u00ebsimeve do t\u00eb shfaqet nj\u00eb mesazh debug q\u00eb tregon se \u00e7far\u00eb lloji paketi \u00ebsht\u00eb.
\nT\u00eb fillojm\u00eb me konfigurimin e router-it Router0. Jam duke kaluar n\u00eb modin e cil\u00ebsimeve globale dhe aktivizoj interfacin G0\/0. M\u00eb pas, fut komand\u00ebn ip nat inside, pastaj kaloj n\u00eb interfacin g0\/1 dhe fut komand\u00ebn ip nat outside. K\u00ebshtu kam caktuar interfacin hyr\u00ebs dhe at\u00eb dal\u00ebs t\u00eb router-it. Tani duhet t\u00eb konfiguraj manualisht adresat IP, q\u00eb do t\u00eb thot\u00eb se duhet t\u00eb transferoj n\u00eb cil\u00ebsime rreshtat e tabel\u00ebs s\u00eb m\u00ebparshme: <\/p>\n

Ip nat inside source static 192.168.1.10 200.124.22.1
\nIp nat inside source static 192.168.1.11 200.124.22.2
\nIp nat inside source static 192.168.1.100 200.124.22.3 <\/p>\n

\"Trajnimi
\n
\nTani do t\u00eb ping-u Router1 nga secila prej pajisjeve tona dhe do t\u00eb shoh se cilat adresa IP do t\u00eb tregoj\u00eb ping-u i pranuar. P\u00ebr k\u00ebt\u00eb, kam vendosur dritaren e hapur CLI t\u00eb router-it R1 n\u00eb pjes\u00ebn e djatht\u00eb t\u00eb ekranit p\u00ebr t\u00eb par\u00eb mesazhet e debug. Tani kaloj n\u00eb terminalin e komandave t\u00eb PC0 dhe ping-u adres\u00ebn 200.124.22.10. Pas k\u00ebsaj, dritarja shfaq nj\u00eb mesazh q\u00eb ping-u \u00ebsht\u00eb marr\u00eb nga adresa IP 200.124.22.1. Kjo do t\u00eb thot\u00eb q\u00eb adresa IP e kompjuterit lokal 192.168.1.10 \u00ebsht\u00eb transformuar n\u00eb adres\u00ebn globale 200.124.22.1.<\/p>\n

\"Trajnimi
\n
\nE nj\u00ebjt\u00ebn gj\u00eb e b\u00ebj me kompjuterin e ardhsh\u00ebm lokal dhe shoh q\u00eb adresa e tij \u00ebsht\u00eb transformuar n\u00eb 200.124.22.2. Pastaj d\u00ebrgoj ping nga serveri dhe shoh adres\u00ebn 200.124.22.3.
\nK\u00ebshtu, kur trafiku nga pajisja e rrjetit lokal arrin n\u00eb router-in ku \u00ebsht\u00eb i configuruar NAT statik, router-i e transformon adres\u00ebn IP lokale n\u00eb adres\u00eb globale sipas tabel\u00ebs dhe e d\u00ebrgon trafikun n\u00eb rrjetin e jasht\u00ebm. P\u00ebr t\u00eb verifikuar tabel\u00ebn e NAT-it, fut komand\u00ebn show ip nat translations.<\/p>\n

\"Trajnimi
\n
\nTani tani mund t\u00eb shohim t\u00eb gjitha transformimet q\u00eb kryen routeri. N\u00eb kolon\u00ebn e par\u00eb Inside Global ndodhet adresa e pajisjes para p\u00ebrkthimit, pra ajo adres\u00eb n\u00ebn t\u00eb cil\u00ebn pajisja duket nga rrjeti i jasht\u00ebm, m\u00eb pas vjen adresa Inside Local, pra adresa e pajisjes n\u00eb rrjetin lokal. Kolona e tret\u00eb tregon Outside Local, nd\u00ebrsa e kat\u00ebrta \u2013 adres\u00ebn Outside Global, me t\u00eb cilat k\u00ebto dy adresa jan\u00eb t\u00eb nj\u00ebjta, sepse ne nuk b\u00ebjm\u00eb transformim t\u00eb adres\u00ebs IP t\u00eb destinacionit. Si\u00e7 e shihni, pas disa sekondash tabela u pastrua, sepse n\u00eb Packet Tracer \u00ebsht\u00eb vendosur nj\u00eb koh\u00eb e shkurt\u00ebr skadimi ping-u. <\/p>\n

Mund t\u00eb pingoj nga routeri R1 serverin n\u00eb adres\u00ebn 200.124.22.3, dhe n\u00ebse rikthehemi te konfigurimet e routerit, mund t\u00eb shohim q\u00eb tabela \u00ebsht\u00eb mbushur p\u00ebrs\u00ebri me kat\u00ebr rreshta ping-u me adres\u00ebn e transformuar t\u00eb destinacionit 192.168.1.100.<\/p>\n

\"Trajnimi
\n
\nSi\u00e7 thash\u00eb, edhe sikur t\u00eb ndodh\u00eb skadimi i transformimit, kur iniciatohet trafiku nga nj\u00eb burim i jasht\u00ebm mekanizmi NAT aktivizohet automatikisht. Kjo ndodh vet\u00ebm kur p\u00ebrdoret NAT statik. <\/p>\n

Tani le t\u00eb shohim se si funksionon NAT dinamik. N\u00eb shembullin ton\u00eb ka 2 adresa publike p\u00ebr tre pajisje n\u00eb rrjetin lokal, megjithat\u00eb mund t\u00eb ket\u00eb dhjet\u00ebra ose qindra t\u00eb tilla hostesh private. Nd\u00ebrkoh\u00eb, n\u00eb internet mund t\u00eb dalin vet\u00ebm 2 pajisje n\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb. Le t\u00eb shohim se \u00e7far\u00eb ndihmon, p\u00ebrve\u00e7 k\u00ebsaj, n\u00eb dallimin mes NAT-it statik dhe atij dinamik.<\/p>\n

Si n\u00eb rastin e m\u00ebparsh\u00ebm, s\u00eb pari duhet t\u00eb p\u00ebrcaktojm\u00eb nd\u00ebrfaqet hyr\u00ebse dhe dal\u00ebse t\u00eb routerit. M\u00eb pas krijojm\u00eb nj\u00eb lloj liste akses, por kjo nuk \u00ebsht\u00eb ACL q\u00eb kemi p\u00ebrmendur n\u00eb m\u00ebsimin e kaluar. Kjo list\u00eb akses p\u00ebrdoret p\u00ebr t\u00eb identifikuar trafikun q\u00eb d\u00ebshirojm\u00eb t\u00eb transformojm\u00eb. Atje shfaqet nj\u00eb term i ri \"interesting traffic\", ose \"trafik interesant\". Ky trafik \u00ebsht\u00eb ai q\u00eb ju intereson p\u00ebr ndonj\u00eb arsye, dhe kur ky trafik p\u00ebrputhet me kushtet e list\u00ebs akses, ai b\u00ebn\u00eb pjes\u00eb n\u00eb NAT dhe transformohet. Ky term zbatohet p\u00ebr trafik n\u00eb shum\u00eb raste, p\u00ebr shembull, n\u00eb rastin e VPN-s\u00eb, \"interesant\" \u00ebsht\u00eb trafik q\u00eb do t\u00eb kaloj\u00eb p\u00ebrmes tunelit VPN. <\/p>\n

Duhet t\u00eb krijojm\u00eb nj\u00eb ACL q\u00eb identifikon trafik interesant, n\u00eb rastin ton\u00eb ky \u00ebsht\u00eb trafiku i nj\u00eb rrjeti t\u00eb t\u00ebr\u00eb 192.168.1.0, bashk\u00eb me mask\u00ebn p\u00ebrkat\u00ebse 0.0.0.255. <\/p>\n

\"Trajnimi
\n
\nPastaj duhet t\u00eb krijojm\u00eb nj\u00eb NAT pool, p\u00ebr t\u00eb cilin p\u00ebrdorim komand\u00ebn ip nat pool dhe tregojm\u00eb pool-in e adresave IP 200.124.22.1 200.124.22.2. Kjo do t\u00eb thot\u00eb se ne ofrojm\u00eb vet\u00ebm dy adresa IP t\u00eb jashtme. M\u00eb pas n\u00eb komand\u00eb p\u00ebrdoret fjala ky\u00e7e netmask dhe futet maska e subnet-it 255.255.255.252. Okteti i fundit i mask\u00ebs \u00ebsht\u00eb (255 - numri i adresave t\u00eb pool-it - 1), k\u00ebshtu q\u00eb n\u00ebse keni 254 adresa n\u00eb pool, maska e subnet-it do t\u00eb jet\u00eb 255.255.255.0. Ky \u00ebsht\u00eb nj\u00eb paramet\u00ebr shum\u00eb i r\u00ebnd\u00ebsish\u00ebm, prandaj kur konfiguroni NAT dinamik, sigurohuni q\u00eb t\u00eb futni vler\u00ebn e sakt\u00eb t\u00eb netmask. <\/p>\n

M\u00eb pas ne p\u00ebrdorim komand\u00ebn q\u00eb aktivizon mekanizmin NAT: ip nat inside source list 1 pool NWKING, ku NWKING \u00ebsht\u00eb emri i pool-it dhe list 1 do t\u00eb thot\u00eb lista e qassh\u00ebm ACL num\u00ebr 1. Mbani mend - q\u00eb kjo komand\u00eb t\u00eb funksionoj\u00eb, fillimisht duhet t\u00eb krijoni nj\u00eb pool t\u00eb adresave dinamike dhe list\u00ebn e qassh\u00ebm. <\/p>\n

Pra, n\u00eb kushtet tona, pajisja e par\u00eb q\u00eb d\u00ebshiron t\u00eb dal\u00eb n\u00eb internet do t\u00eb mund ta b\u00ebj\u00eb k\u00ebt\u00eb, pajisja e dyt\u00eb gjithashtu, por pajisja e tret\u00eb do t\u00eb duhet t\u00eb pres\u00eb derisa t\u00eb lirohet nj\u00eb nga adresat e pool-it. Konfigurimi i NAT dinamik p\u00ebrb\u00ebhet nga 4 hapa: p\u00ebrcaktimi i nd\u00ebrfaqeve hyr\u00ebse dhe dal\u00ebse, p\u00ebrcaktimi i trafikut 'interesant', krijimi i NAT pool-it dhe vet\u00eb konfigurimi.
\nTani do t\u00eb kalojm\u00eb n\u00eb Packet Tracer dhe do t\u00eb p\u00ebrpiqemi t\u00eb konfigurojm\u00eb NAT dinamik. Fillimisht duhet t\u00eb heqim konfigurimet e NAT statik, p\u00ebr t\u00eb cilin futim komandat nj\u00ebpasnj\u00ebsh:<\/p>\n

no Ip nat inside source static 192.168.1.10 200.124.22.1
\nno Ip nat inside source static 192.168.1.11 200.124.22.2
\nno Ip nat inside source static 192.168.1.100 200.124.22.3. <\/p>\n

M\u00eb pas krijoj nj\u00eb list\u00eb qassh\u00ebm List 1 p\u00ebr t\u00eb gjith\u00eb rrjetin me komand\u00ebn access-list 1 permit 192.168.1.0 0.0.0.255 dhe formoj NAT pool-in me komand\u00ebn ip nat pool NWKING 200.124.22.1 200.124.22.2 netmask 255.255.255.252. N\u00eb k\u00ebt\u00eb komand\u00eb kam caktuar emrin e pool-it, adresat q\u00eb p\u00ebrfshihen n\u00eb t\u00eb, dhe mask\u00ebn e rrjetit.<\/p>\n

Pastaj un\u00eb p\u00ebrcaktoj se \u00e7far\u00eb NAT-i \u00ebsht\u00eb \u2013 i brendsh\u00ebm apo i jasht\u00ebm, dhe burimin nga i cili NAT-i duhet t\u00eb marr\u00eb informacionin, n\u00eb rastin ton\u00eb \u00ebsht\u00eb lista, duke p\u00ebrdorur komand\u00ebn ip nat inside source list 1. Pas k\u00ebsaj sistemi do t\u00eb jap\u00eb nj\u00eb paralajm\u00ebrim \u2013 nevojitet nj\u00eb grup i t\u00ebr\u00eb apo nj\u00eb nd\u00ebrfaqe e caktuar. Un\u00eb zgjedh grupin sepse kemi m\u00eb shum\u00eb se nj\u00eb adres\u00eb t\u00eb jashtme. N\u00ebse zgjidhni nd\u00ebrfaqen, do t\u00eb duhet t\u00eb specifikoni portin me adres\u00ebn e caktuar IP. N\u00eb form\u00ebn e fundit komand\u00eb do t\u00eb duket k\u00ebshtu: ip nat inside source list 1 pool NWKING. Tani ky grup p\u00ebrb\u00ebhet nga dy adresa 200.124.22.1 200.124.22.2, megjithat\u00eb ju mund t'i ndryshoni ose shtoni adresa t\u00eb reja, q\u00eb nuk jan\u00eb t\u00eb lidhura me nj\u00eb nd\u00ebrfaqe t\u00eb caktuar. <\/p>\n

Duhet t\u00eb siguroheni q\u00eb tabela juaj e ruteve \u00ebsht\u00eb azhurnuar n\u00eb m\u00ebnyr\u00eb q\u00eb ndonj\u00ebra nga k\u00ebto adresa IP n\u00eb grup t\u00eb duhet t\u00eb drejtohet n\u00eb k\u00ebt\u00eb pajisje, p\u00ebrndryshe nuk do t\u00eb merrni trafikun e kund\u00ebrt. P\u00ebr t\u00eb verifikuar funksionalitetin e konfigurimeve, ne do t\u00eb p\u00ebrs\u00ebrisim procedur\u00ebn e pingimit t\u00eb router-it n\u00eb re, q\u00eb e b\u00ebm\u00eb p\u00ebr NAT-in statik. Un\u00eb do t\u00eb hap dritaren e router-it Router 1, q\u00eb t\u00eb shoh mesazhet e modit t\u00eb debugimit, dhe do ta pingoj nga secila nga 3 pajisjet.<\/p>\n

\"Trajnimi
\n
\nNe shohim se t\u00eb gjitha adresat burimore, nga ku vijn\u00eb paketat e pingut, p\u00ebrputhen me konfigurimet. Megjithat\u00eb, pingimi nga kompjuteri PC0 nuk kalon, sepse i mungonte nj\u00eb adres\u00eb e lir\u00eb e jashtme. N\u00ebse hyjm\u00eb n\u00eb konfigurimet e Router 1, \u00ebsht\u00eb e dukshme se n\u00eb k\u00ebt\u00eb moment po p\u00ebrdoren adresat e grupit 200.124.22.1 dhe 200.124.22.2. Tani un\u00eb do t\u00eb \u00e7aktivizoj p\u00ebrkthimin, dhe do t\u00eb shihni se si rreshtat zhduken nj\u00eb pas nj\u00eb. Un\u00eb p\u00ebrs\u00ebri e nis pingimin nga kompjuteri PC0, dhe si\u00e7 e shihni, tani gjith\u00e7ka funksionon, sepse ai arriti t\u00eb marr\u00eb adres\u00ebn e lir\u00eb t\u00eb jashtme 200.124.22.1. <\/p>\n

Si mund t\u00eb pastroj tabel\u00ebn NAT dhe t\u00eb anuloj p\u00ebrkthimin e adresave t\u00eb vendosur? Hyjm\u00eb n\u00eb konfigurimet e router-it Router0 dhe shkruajm\u00eb komand\u00ebn clear ip nat translation * me \"ylla\" n\u00eb fund t\u00eb rreshtit. N\u00ebse tani shikoni gjendjen e p\u00ebrkthimit duke p\u00ebrdorur komand\u00ebn show ip nat translation, sistemi do t\u00eb na jap\u00eb nj\u00eb rresht t\u00eb zbraz\u00ebt. <\/p>\n

P\u00ebr t\u00eb par\u00eb statistikat e NAT-it p\u00ebrdoret komanda show ip nat statistics. <\/p>\n

\"Trajnimi
\n
\nKy \u00ebsht\u00eb nj\u00eb komand\u00eb shum\u00eb e dobishme, e cila tregon numrin e p\u00ebrgjithsh\u00ebm t\u00eb transformimeve dinamike, statike dhe avancuara NAT\/PAT. E shihni q\u00eb \u00ebsht\u00eb e barabart\u00eb me 0, pasi e kemi pastruar informacionin e p\u00ebrkthimit me komand\u00ebn e m\u00ebparshme. K\u00ebtu shfaqen nd\u00ebrfaqet hyr\u00ebse dhe dal\u00ebse, numri i transformimeve t\u00eb suksesshme dhe t\u00eb pasuksesshme (numri i d\u00ebshtimeve \u00ebsht\u00eb i lidhur me munges\u00ebn e nj\u00eb adrese t\u00eb lir\u00eb t\u00eb jashtme p\u00ebr host-in e brendsh\u00ebm), emri i list\u00ebs s\u00eb aksesit dhe puli. <\/p>\n

Tani do t\u00eb kalojm\u00eb te lloji m\u00eb i njohur i transformimit t\u00eb adresave IP \u2013 NAT-i i avancuar, ose PAT. P\u00ebr t\u00eb konfiguracioni PAT \u00ebsht\u00eb e nevojshme t\u00eb ndiqni t\u00eb nj\u00ebjtat hapa si p\u00ebr konfigurimin e NAT-it dinamik: p\u00ebrcaktoni nd\u00ebrfaqet hyr\u00ebse dhe dal\u00ebse t\u00eb router-it, identifikoni trafikun 'interesant', krijoni nj\u00eb pulu NAT dhe konfiguroni PAT. Ne mund t\u00eb krijojm\u00eb nj\u00eb pulu t\u00eb ngjash\u00ebm me disa adresa, sikurse n\u00eb rastin e m\u00ebparsh\u00ebm, por nuk \u00ebsht\u00eb e nevojshme, sepse n\u00eb PAT gjithmon\u00eb p\u00ebrdoret e nj\u00ebjta adres\u00eb e jashtme. Dallimi midis konfigurimit t\u00eb NAT-it dinamik dhe PAT-i p\u00ebrqendrohet vet\u00ebm n\u00eb fjal\u00ebn ky\u00e7e overload, e cila p\u00ebrfundon komand\u00ebn e fundit t\u00eb konfigurimit. Pas futjes s\u00eb k\u00ebsaj fjale, NAT-i dinamik automatikisht shnd\u00ebrrohet n\u00eb PAT.<\/p>\n

\"Trajnimi
\n
\nP\u00ebr m\u00eb tep\u00ebr, ju p\u00ebrdorni vet\u00ebm nj\u00eb adres\u00eb n\u00eb pulin NWKING, p\u00ebr shembull, 200.124.22.1, por e specifikoni dy her\u00eb si adres\u00ebn e jashtme fillestare dhe p\u00ebrfundimtare me mask\u00ebn e rrjetit 255.255.255.0. Mund t\u00eb veproni m\u00eb thjesht, duke p\u00ebrdorur n\u00eb vend t\u00eb vargut ip nat 1 pool NWKING 200.124.22.1 200.124.22.1 netmask 255.255.255.0 parametrin source interface dhe adres\u00ebn fiks 200.124.22.1 t\u00eb nd\u00ebrfaqes G0\/1. N\u00eb k\u00ebt\u00eb rast, t\u00eb gjitha adresat lokale kur dalin n\u00eb internet do t\u00eb konvertohen n\u00eb k\u00ebt\u00eb IP adres\u00eb. <\/p>\n

N\u00eb puli gjithashtu mund t\u00eb p\u00ebrdorni \u00e7do adres\u00eb tjet\u00ebr IP, jo domosdoshm\u00ebrisht q\u00eb t'i p\u00ebrkas\u00eb nj\u00eb nd\u00ebrfaqe fizike specifike. Megjithat\u00eb, n\u00eb k\u00ebt\u00eb rast duhet t\u00eb siguroheni q\u00eb t\u00eb gjith\u00eb router\u00ebt n\u00eb rrjet t\u00eb mund t\u00eb drejtojn\u00eb trafikun e kthyer n\u00eb pajisjen q\u00eb keni zgjedhur. Disavantazhi i NAT \u00ebsht\u00eb se nuk mund t\u00eb p\u00ebrdoret p\u00ebr adres\u00ebt e kalimit, sepse n\u00eb momentin q\u00eb paketa e kthyer kthehet n\u00eb pajisjen lokale, adresa dinamike IP e NAT-it mund t\u00eb ket\u00eb ndryshuar. Q\u00eb do t\u00eb thot\u00eb se duhet t\u00eb jeni t\u00eb sigurt q\u00eb adresa IP e zgjedhur do t\u00eb mbetet e aksesueshme p\u00ebr gjith\u00eb koh\u00ebn e sesionit t\u00eb komunikimit. <\/p>\n

Le t\u00eb shohim k\u00ebt\u00eb n\u00ebp\u00ebrmjet Packet Tracer. S\u00eb pari, duhet t\u00eb fshij NAT-in dinamik me komand\u00ebn no Ip nat inside source list 1 NWKING dhe t\u00eb heq pool-in NAT me komand\u00ebn no Ip nat pool NWKING 200.124.22.1 200.124.22.2 netmask 255.255.255.252. <\/p>\n

Pastaj duhet t\u00eb krijoj nj\u00eb pool PAT me komand\u00ebn Ip nat pool NWKING 200.124.22.2 200.124.22.2 netmask 255.255.255.255. K\u00ebt\u00eb her\u00eb po p\u00ebrdor IP-n\u00eb q\u00eb nuk i p\u00ebrket pajisjes fizike, sepse pajisja fizike ka adres\u00ebn 200.124.22.1, dhe dua t\u00eb p\u00ebrdor 200.124.22.2. N\u00eb rastin ton\u00eb, kjo funksionon sepse kemi nj\u00eb rrjet lokal.<\/p>\n

M\u00eb pas, konfiguroni PAT me komand\u00ebn Ip nat inside source list 1 pool NWKING overload. Pas futjes s\u00eb k\u00ebsaj komande, aktivizohet transformimi i adresave PAT. P\u00ebr t\u00eb kontrolluar sakt\u00ebsin\u00eb e konfigurimit, shkoj n\u00eb pajisjet tona, serverin dhe dy kompjuter\u00ebt, dhe pingoj nga kompjuteri PC0 Router1 n\u00eb adres\u00ebn 200.124.22.10. N\u00eb dritaren e konfigurimit t\u00eb router-it, shihen linjat e debugging, ku tregohet se burimi i ping-ut, ashtu si\u00e7 e prisnim, \u00ebsht\u00eb IP-adresa 200.124.22.2. Nga kjo adres\u00eb vjen ping-u i d\u00ebrguar nga kompjuteri PC1 dhe serveri Server0. <\/p>\n

T\u00eb shohim se \u00e7far\u00eb ndodh n\u00eb tabel\u00ebn e transformimeve t\u00eb router-it Router0. Shihni se t\u00eb gjitha transformimet jan\u00eb t\u00eb suksesshme, \u00e7do pajisje i caktohet porta e vet, dhe t\u00eb gjitha adresat lokale lidhen me Router1 n\u00ebp\u00ebrmjet adres\u00ebs IP t\u00eb pool-it 200.124.22.2. <\/p>\n

\"Trajnimi
\n
\nPo p\u00ebrdor komand\u00ebn show ip nat statistics p\u00ebr t\u00eb par\u00eb statistikat e PAT. <\/p>\n

\"Trajnimi
\n
\nShohim se numri total i transformimeve, ose translacioneve t\u00eb adresave, \u00ebsht\u00eb 12, shohim karakteristikat e pool-it dhe informacione t\u00eb tjera. <\/p>\n

Tani do t\u00eb b\u00ebj di\u00e7ka tjet\u00ebr - do t\u00eb fut komand\u00ebn Ip nat inside source list 1 interface gigabit Ethernet g0\/1 overload. N\u00ebse pas k\u00ebsaj pingoj router-in nga kompjuteri PC0, duket se paketi erdhi nga adresa 200.124.22.1, pra nga interface-i fizik! Kjo \u00ebsht\u00eb nj\u00eb rrug\u00eb m\u00eb e leht\u00eb: n\u00ebse nuk d\u00ebshironi t\u00eb krijoni nj\u00eb pool, q\u00eb ndodh m\u00eb shpesh me p\u00ebrdorimin e router-ave sht\u00ebpiake, at\u00ebher\u00eb si adres\u00eb t\u00eb jashtme NAT mund t\u00eb p\u00ebrdorni IP-n\u00eb e interface-it fizik t\u00eb router-it. Kjo \u00ebsht\u00eb m\u00ebnyra m\u00eb e zakonshme e transformimit t\u00eb adres\u00ebs s\u00eb hostit tuaj privat p\u00ebr nj\u00eb rrjet publik.
\nSot u studiuam nj\u00eb tem\u00eb shum\u00eb t\u00eb r\u00ebnd\u00ebsishme sot, prandaj \u00ebsht\u00eb e nevojshme t\u00eb praktikoni n\u00eb t\u00eb. P\u00ebrdorni Packet Tracer p\u00ebr t\u00eb provuar njohurit\u00eb tuaja teorike n\u00eb zgjidhjen e detyrave praktike p\u00ebr konfigurimin e NAT dhe PAT. Ne arrit\u00ebm n\u00eb fund t\u00eb studimit t\u00eb tematik\u00ebs ICND1 \u2014 provimit t\u00eb par\u00eb t\u00eb kursit CCNA, prandaj video m\u00ebsimi tjet\u00ebr, me gjas\u00eb, do t\u00eb jet\u00eb dedikuar p\u00ebrmbledhjes. <\/p>\n

\r\n \"Luaj\r\n
<\/div>\r\n <\/div><\/center>
\nFaleminderit q\u00eb q\u00ebndroni me ne. Ju p\u00eblqejn\u00eb artikujt tan\u00eb? D\u00ebshironi t\u00eb shihni m\u00eb shum\u00eb materiale interesante? Na mb\u00ebshtetni duke b\u00ebr\u00eb nj\u00eb porosi ose duke na rekomanduar miqve tuaj. 30% zbritje p\u00ebr p\u00ebrdoruesit e Habra n\u00eb nj\u00eb analog unik t\u00eb server\u00ebve entry-level, t\u00eb cilin e kemi shpikur p\u00ebr ju:<\/b> E gjith\u00eb e v\u00ebrteta p\u00ebr VPS (KVM) E5-2650 v4 (6 B\u00ebrthama) 10GB DDR4 240GB SSD 1Gbps nga $20 ose si t\u00eb ndajm\u00eb sakt\u00ebsisht serverin?<\/a><\/noindex> (opcionet me RAID1 dhe RAID10, deri n\u00eb 24 b\u00ebrthama dhe deri n\u00eb 40GB DDR4 jan\u00eb t\u00eb disponueshme).<\/p>\n

Dell R730xd p\u00ebr dy her\u00eb m\u00eb lir\u00eb?<\/b> Vet\u00ebm te ne 2 x Intel TetraDeca-Core Xeon 2x E5-2697v3 2.6GHz 14C 64GB DDR4 4x960GB SSD 1Gbps 100 TB nga $199<\/a><\/noindex> n\u00eb Holand\u00eb! Dell R420 \u2014 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB \u2014 nga $99!<\/b><\/b> Lexoni rreth Si t\u00eb nd\u00ebrtoni nj\u00eb infrastruktur\u00eb t\u00eb klas\u00ebs korporative me p\u00ebrdorimin e server\u00ebve Dell R730xd E5-2650 v4 me \u00e7mim 9000 euro p\u00ebr pak para?<\/a><\/noindex>
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0438\u0437\u0443\u0447\u0430\u0442\u044c PAT (Port Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 IP- \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0440\u0442\u043e\u0432, \u0438 NAT (Network Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432. PAT \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0447\u0430\u0441\u0442\u043d\u044b\u043c \u0441\u043b\u0443\u0447\u0430\u0435\u043c NAT. \u041c\u044b \u0440\u0430\u0441\u0441\u043c\u043e\u0442\u0440\u0438\u043c \u0442\u0440\u0438 \u0442\u0435\u043c\u044b: \u2014 \u043f\u0440\u0438\u0432\u0430\u0442\u043d\u044b\u0435, \u0438\u043b\u0438 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0435 (\u0432\u043d\u0443\u0442\u0440\u0438\u0441\u0435\u0442\u0435\u0432\u044b\u0435, \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435) IP-\u0430\u0434\u0440\u0435\u0441\u0430 \u0438 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u044b\u0435, \u0438\u043b\u0438 \u0432\u043d\u0435\u0448\u043d\u0438\u0435 IP-\u0430\u0434\u0440\u0435\u0441\u0430; \u2014 NAT \u0438 PAT; \u2014 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 NAT\/ PAT. \u041d\u0430\u0447\u043d\u0435\u043c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28314,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-37723","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Trajnimi Cisco 200-125 CCNA v3.0. Dita 29. PAT dhe NAT | ProHoster","description":"Sot do t\u00eb studiojm\u00eb PAT (Port Address Translation), teknologjin\u00eb e p\u00ebrkthimit t\u00eb adresave IP duke p\u00ebrdorur porta, dhe NAT (Network Address Translation), teknologjin\u00eb e transformimit t\u00eb adresave IP t\u00eb paketeve n\u00eb kalim.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0422\u0440\u0435\u043d\u0438\u043d\u0433 Cisco 200-125 CCNA v3.0. \u0414\u0435\u043d\u044c 29. PAT \u0438 NAT | ProHoster","og:description":"\u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043c\u044b \u0431\u0443\u0434\u0435\u043c \u0438\u0437\u0443\u0447\u0430\u0442\u044c PAT (Port Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u0442\u0440\u0430\u043d\u0441\u043b\u044f\u0446\u0438\u0438 IP- \u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u043e\u0440\u0442\u043e\u0432, \u0438 NAT (Network Address Translation), \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044e \u043f\u0440\u0435\u043e\u0431\u0440\u0430\u0437\u043e\u0432\u0430\u043d\u0438\u044f IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0442\u0440\u0430\u043d\u0437\u0438\u0442\u043d\u044b\u0445 \u043f\u0430\u043a\u0435\u0442\u043e\u0432.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/trening-cisco-200-125-ccna-v3-0-den-29-pat-i-nat","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:19:20+00:00","article:modified_time":"2019-10-31T19:19:20+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"37723","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 19:02:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:22:28","updated":"2026-01-23 19:02:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37723","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=37723"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/37723\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/28314"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=37723"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=37723"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=37723"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}