NAT配置

静态NAT配置

配置

nat static global { global-address} inside {host-address } 命令用于创建静态NAT。
global参数用于配置外部公网地址。
inside参数用于配置内部私有地址。

• AR1-NAT

<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]sy NAT
[NAT]int g0/0/0

[NAT-GigabitEthernet0/0/0]ip address 192.168.1.254 24

[NAT-GigabitEthernet0/0/0]int s1/0/0

[NAT-Serial1/0/0]ip address 200.10.10.2 24

[NAT-Serial1/0/0]nat static global 202.10.10.1 inside 192.168.1.1
[NAT-Serial1/0/0]nat static global 202.10.10.2 inside 192.168.1.2

• Internet

<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]int s1/0/0

[Huawei-Serial1/0/0]ip address 100.1.1.1 24
[Huawei-Serial1/0/0]q

[Huawei]ip route-static 0.0.0.0 0.0.0.0 200.10.10.2 

抓包测试

动态NAT配置

配置

• AR1-NAT

<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]sy NAT

[NAT]nat address-group 1 200.10.10.1 200.10.10.200

[NAT]acl 2000

[NAT-acl-basic-2000]rule 5 permit source 192.168.1.0 0.0.0.255
[NAT-acl-basic-2000]q

[NAT]int s1/0/0

[NAT-Serial1/0/0]nat outbound 2000 address-group 1 no-pat 

[NAT-Serial1/0/0]ip address 200.10.10.201 24

[NAT-GigabitEthernet0/0/0]ip address 192.168.1.254 24

• Internet

<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]int s1/0/0

[Huawei-Serial1/0/0]ip address 100.1.1.1 24
[Huawei-Serial1/0/0]q

[Huawei]ip route-static 0.0.0.0 0.0.0.0 200.10.10.201

测试

Easy IP配置

配置

• AR1-NAT

<Huawei>sy
Enter system view, return user view with Ctrl+Z.
[Huawei]sy NAT
[NAT]int g0/0/0

[NAT-GigabitEthernet0/0/0]ip address 192.168.1.254 24

[NAT-GigabitEthernet0/0/0]q
[NAT]int s1/0/0

[NAT-Serial1/0/0]ip address 200.10.10.1 24
[NAT-Serial1/0/0]q
[NAT]acl 2000

[NAT-acl-basic-2000]rule 5 permit source 192.168.1.0 0.0.0.255
[NAT-acl-basic-2000]q
[NAT]int s1/0/0

[NAT-Serial1/0/0]nat outbound 2000

• Internet

<Huawei>sy

[Huawei]int s1/0/0

[Huawei-Serial1/0/0]ip address 100.1.1.1 24

[Huawei-Serial1/0/0]q

[Huawei]ip route-static 0.0.0.0 0.0.0.0 200.10.10.1 

测试

• PC1
  

• PC2