200-301: Cisco Certified Network AssociateDemo

To overload only VLAN 200, the NAT ACL must match the inside local subnet for VLAN 200 and not VLAN 100. With interface g2/0/1.200 set to 192.168.100.33/27, VLAN 200 is the 192.168.100.32/27 network, which is matched by wildcard 0.0.0.31. Applying ip nat inside source list 99 interface gi1/0/0 overload then translates only packets from that subnet out the public interface. VLAN 100 is excluded because its subnet is not permitted by the ACL, so its devices are not PAT-translated by this rule. Cisco NAT overload uses a standard ACL to identify inside local addresses to be translated and requires the inside and outside interfaces to be marked accordingly.