← Back to kitOffline reference
Experiment 8 — ICMP, ARP, DHCP and NAT
Manual pages: 74–81 | Tools: Wireshark + Cisco Packet Tracer
AIM
To analyze ICMP/ARP packets using Wireshark and configure DHCP and NAT in Cisco Packet Tracer.
PART A — WIRESHARK PROCEDURE
- Open Wireshark; capture traffic on an authorized active network interface.
- In Windows Command Prompt:
ping 8.8.8.8. Filter Wireshark withicmp. - Select Echo Request / Echo Reply. Examine IP source/destination, ICMP type (8 request, 0 reply), TTL and sequence.
- To observe ARP for your own gateway, first start capture and ping your gateway (example
ping 192.168.1.1). If its MAC is already cached, clear that entry if permitted (manual usesarp -d *, which may require administrator rights), then ping again. Applyarpfilter. - Note ARP sender/target MAC + IP and Request/Reply; stop and save a
.pcapngcapture.
PART B — DHCP PROCEDURE
- New Packet Tracer project:
PC0, PC1 → Switch0 → Router0 G0/0. - Router0 CLI: enter DHCP_Router.cli.
- Both PCs → Desktop → IP Configuration → DHCP; choose DHCP rather than Static.
- PC0 Command Prompt:
ipconfig. Observe assigned address 192.168.1.x, mask /24 and gateway192.168.1.1. - Router0 CLI:
show ip dhcp bindingto see leased addresses. Testping 192.168.1.1.
PART C — NAT/PAT PROCEDURE (separate topology)
- New Packet Tracer project:
PC0/PC1 → Switch0 → Router0 (LAN G0/0) ↔ (G0/1) Router1 (outside G0/0). - Assign PC0
192.168.1.10/24and PC1192.168.1.11/24, gateway192.168.1.1. LAN =192.168.1.0/24, WAN link =200.1.1.0/30. - Router0 CLI: NAT_Router0_Ethernet.cli. Router1 CLI: NAT_Router1_Simulated_Outside.cli.
- The second router has loopback
8.8.8.8representing a test destination; this does not make the real Internet reachable. This is a complete local simulation to replace the manual's assumed external network. The manual uses serial S0/0/0, but the included scripts assume EthernetG0/1on Router0. - On PC0 run
ping 8.8.8.8then on Router0show ip nat translations/show ip nat statistics. Translations may be transient after ICMP exits; retry ping while checking.
EXPECTED OUTPUT
ICMP: Echo Request Type 8; Echo Reply Type 0
ARP: Request to resolve IPv4 to MAC; Reply provides MAC
DHCP: 192.168.1.x / 255.255.255.0 / gateway 192.168.1.1
NAT: inside local 192.168.1.10 -> inside global 200.1.1.1
RESULT
Thus, ICMP/ARP were analyzed using Wireshark; DHCP addressing and NAT overload were configured and tested in Cisco Packet Tracer.
VIVA
- DHCP leases IP settings automatically; NAT translates addresses; PAT overload shares one external IP using identifiers/ports.
- ARP maps IPv4 to MAC on the local link; ICMP is used by ping.
- NAT requires correct inside/outside marking, ACL, route and reachable outside destination.