How to Configure Dynamic NAT on Cisco Router in GNS3

The purpose of using Dynamic NAT on the Router is to enable clients on the local network to match IP addresses purchased by the ISP when accessing the Internet.

How to Configure Dynamic NAT on Cisco Router in GNS3

How to Enable Dynamic NAT on Cisco Router

In our previous article, we reviewed how to configure PAT and Static NAT. In this article, we will configure Dynamic Network Address Translation on a Router.

To configure Dynamic NAT, you must first create an access-list. After you have granted access to the LAN IP block with access-list, you must create an IP pool with the ip nat pool command and add the addresses that you have allocated by the Internet Service Provider.

To better understand Dynamic Address Translation, you can create a detailed network project using VMware Workstation and GNS3.

With Virtual Network Editor, you can create VMnet and add the IP address block of virtual machines to VMnet to configure the virtual machines in VMware according to the network topology you create.

You also need to connect to the Internet via your computer’s Ethernet port. Because, as we mentioned before, the GNS3 program has problems accessing the Internet with a WiFi card.

How to Convert Private IP Addresses to Global IP Addresses, and Connect Virtual Machines to the Internet

Follow the steps below to configure Dynamic NAT on the simulator software.

   Step 1

Open the graphical network simulator program and type the project name and click OK.

Creating a New Project in GNS3

   Step 2

Add a Cisco Router, Switch, and Cloud to the workspace to create a network topology as shown in the image below.

In addition, add VMware virtual machines to the workspace.

Network Topology in GNS3

   Step 3

Select and add your computer’s Ethernet in the Cloud configuration. If you select the WiFi network adapter, you cannot take virtual machines to the Internet.

Internet Configuration

   Step 4

After running the Cisco Router, open the CLI command console and perform the following commands in sequence.

R1# conf t
R1(config)# interface fastethernet0/0
R1(config-if)# ip address
R1(config-if)# ip nat inside
R1(config-if)# no shutdown
R1(config-if)# exit
R1(config)#interface fastethernet0/1
R1(config-if)# ip address dhcp
R1(config-if)# ip nat outside
R1(config-if)# no shutdown
R1(config-if)# exit
R1(config)# access-list 1 permit
R1(config)# ip nat pool DYNAMICNAT netmask
R1(config)# ip nat inside source list 1 pool DYNAMICNAT
R1(config)# exit
R1# copy running-config startup-config

With the access list, allow the network to access the Internet and configure the IP address range allocated by your ISP with the ip nat pool.

Computers on the LAN will access the Internet with the IP addresses created in this pool.

Dynamic NAT differs from Static NAT in that it controls multiple IP addresses in a single repository.

Router CLI

   Step 5

After setting up Dynamic NAT, ping the Router’s FastEthetnet0/0 interface from the Windows 8.1 virtual machine.


   Step 6

Check the network connection from the Windows 10 virtual machine by pinging the Router’s FastEthetnet0/0 interface.


   Step 7

Use the show ip interface brief command to check whether the interfaces of the Cisco router are open.

You can see that the IP address of the FastEthernet0/1 interface assigns via the DHCP server on the local network.

show ip interface brief

   Step 8

When you ping the Google DNS servers from the Cisco router, you can see that this process was successful.

Pinging via the router

   Step 9

The ping from the Windows 8.1 machine to the Google DNS servers will also succeed.

Pinging via the Virtual Machine

   Step 10

As you can see, pinging from the Windows 10 machine to the Google DNS servers will be successful.

Pinging via the VM

   Step 11

When you apply for the show ip nat translation command in the router’s CLI console, you can see that the and IP addresses converted to Global IP addresses through Dynamic NAT.

Virtual machines used idle and IP addresses in the IP NAT pool.

show ip nat translation

   Step 12

In the Cisco Router’s CLI console, you can see NAT statistics when you apply the show ip nat statistics command.

show ip nat statistics

Show Commands

R1#show running-config
Building configuration...

Current configuration : 1175 bytes
version 12.4
service timestamps debug datetime msec
service timestamps log datetime msec
no service password-encryption
hostname R1
no aaa new-model
memory-size iomem 5
no ip icmp rate-limit unreachable
ip cef
no ip domain lookup
ip auth-proxy max-nodata-conns 3
ip admission max-nodata-conns 3
ip tcp synwait-time 5
interface FastEthernet0/0
ip address
ip nat inside
ip virtual-reassembly
duplex auto
speed auto
interface FastEthernet0/1
ip address dhcp
ip nat outside
ip virtual-reassembly
duplex auto
speed auto
ip forward-protocol nd
no ip http server
no ip http secure-server
ip nat pool DYNAMICNAT netmask
ip nat inside source list 1 pool DYNAMICNAT
access-list 1 permit
no cdp log mismatch duplex
line con 0
exec-timeout 0 0
privilege level 15
logging synchronous
line aux 0
exec-timeout 0 0
privilege level 15
logging synchronous
line vty 0 4


R1#show ip nat statistics
Total active translations: 134 (0 static, 134 dynamic; 132 extended)
Outside interfaces:
Inside interfaces:
Hits: 17148 Misses: 402
CEF Translated packets: 17183, CEF Punted packets: 731
Expired translations: 165
Dynamic mappings:
-- Inside Source
 access-list 1 pool DYNAMICNAT refcount 134
pool DYNAMICNAT: netmask
start end
type generic, total addresses 6, allocated 2 (33%), misses 0
-- Outside Destination
 access-list 1 pool 1 refcount 0
Appl doors: 0
Normal doors: 0
Queued Packets: 0


R1#show ip nat translations
Pro Inside global Inside local Outside local Outside global
Pro Inside global Inside local Outside local Outside global
--- --- ---


How to Setup Dynamic NAT ⇒ Video

You can watch the video below to enable Dynamic NAT with GNS3 and also subscribe to our YouTube channel to support us!

   Final Word

Dynamic NAT is configured only with the pool system according to Static NAT. You can test this process more specifically with GNS3 and VMware programs. Thanks for following us!

   Related Articles

♦ SSH Configuration
♦ Telnet Configuration
DHCP Configuration
What is NAT?
Router Config Backup

Add a Comment

Your email address will not be published. Required fields are marked *