Now, previously, when we typed show IP NAT translations, we only had inside local inside global
one entry, that is the static entry.
There's no outside local or outside global address because that's not being nattered.
Let's try telnetting
to 8.1.1.5.
Notice it says password required, but none set and the connection was terminated.
So on router 1 line VTY 0 to 5.
Login password Cisco enable password Cisco.
On Router 3, do the telnet again, notice I can log in to Router 1.
When I now look at the net translations on rawData, you can see that there are multiple net translations
here.
We've got to tell net sessions and that may be because the other net translation hasn't timed out to
all the net translations.
Show IP net translation shows that one entry.
We've got our next translation back again, so inside local of this IP address has got a telnet session,
Port 23 going to it.
So this router eight one one two is using an ephemeral port.
In other words, a random port number to access router one on Port 23.
Router three, however, is using this IP address to access this IP address on the outside Internet,
which is then translated to this address internally, allowing router three to access router one.
Now, there's no better way than looking at Wireshark to see what's actually going on.
So I'll start Wireshark on router TS first Ethan interface.
So I'm going to start Wireshark on this interface.
I'm going to hit enter on router three, I noticed there's some telnet data now.
So some telnet data from eight one one two to eight, one one five and eight one one five to eight one
one two.
So in the Telnet sessions, what you'll notice.
Is that the telnet to data in this case, a carriage return is going from eight to one, one two to
eight, one one five, and then there's a reply back again.
So if I type enable and then put my password in.
What we'll see in the output here.
He's telnet data.
So let's Folta for telnet.
So scrolling down, we can see that Rauda one was telling Rawda two about the right, a prompt and then
Rouda to type to enable and then we go carriage return.
Rawda one requested a password and then rawData entered S.I.
S CEO and there's the password and hit carriage return.
And then the prompt changed.
Cerrado one told Rodders three that the new prompt is our one hash or pound.
The important piece to note is that all communication on this link is between eight one one two and
eight one one five.
Which is the inside global address of the router 10 one one one.
I'll stop the capture.
And now let's do it again, I'll start the capture on the inside interface, so I'm going to do it on
fust Ethernet zero zero of Rawda to.
I'll fill to this once again for Telnet traffic and on Rawda three, now let's type exit and turn it
back again.
Put in the password type enable, put in the password.
So when you look at this traffic notice, it's from.
Eight one one two.
Raddest trees, IP address going to 10 one one one Rouda one's IP address, so all the telnet traffic
in this output.
Including the password that's being sent, Cisco is from eight one one two to 10 one one one, this
router in the middle is translating eight one one five to eight one one two four.
All traffic between Rawda one and router three.