路由交換

網絡位址轉換nat （全）

2008-04-04 16:07

靜态nat

r1>enable

r1#config t

enter configuration commands, .e per line. end with cntl/z.

r1(config)#interface s1/0

r1(config-if)#ip address 202.108.0.1 255.255.255.248

r1(config-if)#encapsulation ppp                        \\接口封裝為ppp

r1(config-if)#ip nat outside                           \\配置為nat外部接口

r1(config-if)#no shutdown

r1(config)#interface f0/0

r1(config-if)#ip address 192.168.0.1 255.255.255.0

r1(config-if)#ip nat inside                             \\配置為nat内部接口

r1(config-if)#exit

r1(config)#ip route 0.0.0.0 0.0.0.0 s1/0

r1(config)#ip nat inside source static 192.168.0.2 202.108.0.3    \\将内部位址轉化為公網源位址

r1(config)#ip nat inside source static 192.168.0.3 202.108.0.4

r2>enable

r2#config t

r2(config)#interface s1/0

r2(config-if)#ip address 202.108.0.2 255.255.255.248

r2(config-if)#encapsulation ppp

r2(config-if)#ip nat outside

r2(config-if)#no shutdown

r2(config)#interface f0/0

r2(config-if)#ip address 10.0.0.1 255.255.255.0

r2(config-if)#ip nat inside

r2(config-if)#exit

r2(config)#ip route 0.0.0.0 0.0.0.0 s1/0

r2(config)#ip nat inside source static 10.0.0.2 202.108.0.5

r2(config)#ip nat inside source static 10.0.0.3 202.108.0.6

動态nat

r1(config)#access-list 1 permit 192.168.0.0 0.0.0.255               \\配置acl确定允許轉換網段

r1(config)#ip nat pool eric 202.108.0.3 202.108.0.4 prefix-length 29 \\建立公網位址池

r1(config)#ip nat inside source list 1 pool eric                     \\進行轉換

pat配置

r1(config)#access-list 1 permit 192.168.0.0 0.0.0.255              

r1(config)#ip nat pool eric 202.108.0.3 202.108.0.3 prefix-length 29

r1(config)#ip nat inside source list 1 pool eric overload           \\進行轉換并開啟端口pat

基于端口的pat

r1(config)#access-list 1 permit 192.168.0.0 0.0.0.255

r1(config)#ip nat inside source list 1 interface serial 1/0 overload \\直接轉換到外部端口上并開啟pat