R1 is the internet edge router. Hosts on the inside use 10.1.1.0/24, and the ISP has assigned the public address 203.0.113.10 to reach an internal web server at 10.1.1.10. The administrator wants outside clients to always reach the server at the fixed public address. The following configuration is already in place: interface GigabitEthernet0/0 ip address 10.1.1.1 255.255.255.0 ip nat inside ! interface GigabitEthernet0/1 ip address 203.0.113.1 255.255.255.0 ip nat outside Which single additional command completes a working inside source static NAT for the server?
interface GigabitEthernet0/0
description LAN to 10.1.1.0/24
ip address 10.1.1.1 255.255.255.0
ip nat inside
!
interface GigabitEthernet0/1
description WAN to ISP
ip address 203.0.113.2 255.255.255.252
ip nat outside- Aip nat inside source static 10.1.1.10 203.0.113.10 Correct
- Bip nat inside source static 203.0.113.10 10.1.1.10
- Cip nat outside source static 10.1.1.10 203.0.113.10
- Dip nat inside source static tcp 10.1.1.10 80 203.0.113.10 80 extendable
Why A is correct: Inside source static takes the inside local address first then the inside global address, so this maps private host 10.1.1.10 to public 203.0.113.10 in both directions, exactly what a one-to-one server mapping needs with the interfaces already marked inside and outside.
Why B is wrong: This reverses the operands. In inside source static the inside local (private) address comes first and the inside global (public) address second, so this would advertise the public address as if it were the private host and fails to translate the server.
Why C is wrong: Outside source static translates addresses that live on the outside network back into the inside, which is the wrong direction for publishing an internal server, so the inside host would never be reachable at the public address.
Why D is wrong: This is a port-forwarding (PAT static) entry that only maps TCP port 80, so it is tempting but narrower than the requirement to reach the whole server at the fixed public address rather than a single service port.