静态NAT+动态NAT+PAT配置
静态NAT+动态NAT+PAT配置
拓扑图
总体配置：
配置路由器ip地址及实现外网互通
Router0
Router>enable
Router#conf
Router(config)#int f0/0
Router(config-if)#ip address 192.168.1.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#int s2/0
Router(config-if)#ip address 192.168.2.1 255.255.255.0
Router(config-if)#clock rate 128000
Router(config-if)#no shutdown
Router(config)#
Router(config)#router rip
Router(config-router)#version 2
Router(config-router)#network 192.168.2.0
Router(config-router)#exit
Router1配置
Router>enable
Router#conf
Router(config)#int f0/0
Router(config-if)#ip address 192.168.3.1 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#int s2/0
Router(config-if)#ip address 192.168.2.2 255.255.255.0
Router(config-if)#no shutdown
Router(config-if)#exit
Router(config)#router rip
Router(config-router)#version 2
Router(config-router)#network 192.168.2.0
Router(config-router)#network 192.168.3.0
Router(config-router)#exit
客户端IP配置如图
服务器IP地址分配
www服务器配置
客户机测试
pc2 IP配置
现在测试server1 ping pc2
PC>ping 192.168.1.2
Pinging 192.168.1.2 with 32 bytes of data:
Reply from 192.168.3.1: Destination host unreachable.
Reply from 192.168.3.1: Destination host unreachable.
Reply from 192.168.3.1: Destination host unreachable.
Reply from 192.168.3.1: Destination host unreachable.
可以看出是不通的
1>>>>静态NAT代码配置
要求：将服务器的IP地址映射到路由器192.168.2.1端口上，路由器3相当于外部网络
在router1上配置如下
Router(config-router)#ip nat inside source static 192.168.1.2 192.168.2.1
Router(config)#int f0/0
Router(config-if)#ip nat inside
Router(config-if)#int s2/0
Router(config-if)#ip nat outside
测试
2>>>>>动态nat配置
现在在router1上配置动态nat，使内网可以ping通外网，但外网不能ping通内网
Router(config)#ip nat pool nat 192.168.2.3 192.168.2.6 netmask 255.255.255.0
Router(config)#ip nat inside source list 1 pool nat
Router(config)#access-list 1 permit 192.168.1.0 0.0.0.255
Router(config)#int f0/0
Router(config-if)#ip nat inside
Router(config-if)#int s2/0
Router(config-if)#ip nat outside
Router(config-if)#exit
Router(config)#
测试
server1 ping pc2
PC>ping 192.168.3.2
Pinging 192.168.3.2 with 32 bytes of data:
Reply from 192.168.3.2: bytes=32 time=78ms TTL=126
Reply from 192.168.3.2: bytes=32 time=94ms TTL=126
Reply from 192.168.3.2: bytes=32 time=94ms TTL=126
Reply from 192.168.3.2: bytes=32 time=93ms TTL=126
pc2 ping server1
PC>ping 192.168.1.2
Pinging 192.168.1.2 with 32 bytes of data:
Reply from 192.168.3.1: Destination host unreachable.
Reply from 192.168.3.1: Destination host unreachable.
Reply from 192.168.3.1: Destination host unreachable.
测试成功
3>>>>>PAT配置
现在在router1上配置PAT，使内网可以ping通外网，但外网不能ping通内网
Router#
Router#conf
Router(config)#ip nat pool nat 192.168.2.3 192.168.2.5 netmask 255.255.255.0
Router(config)#ip nat inside source list 1 pool nat overload
Router(config)#access-list 1 permit 192.168.1.0 0.0.0.255
Router(config)#int f0/0
Router(config-if)#ip nat inside
Router(config-if)#int s2/0
Router(config-if)#ip nat outside
Router(config-if)#exit
Router(config)#end
测试
server1 ping pc2
PC>ping 192.168.3.2
Pinging 192.168.3.2 with 32 bytes of data:
Reply from 192.168.3.2: bytes=32 time=78ms TTL=126
Reply from 192.168.3.2: bytes=32 time=94ms TTL=126
Reply from 192.168.3.2: bytes=32 time=94ms TTL=126
Reply from 192.168.3.2: bytes=32 time=93ms TTL=126
pc2 ping server1
PC>ping 192.168.1.2
Pinging 192.168.1.2 with 32 bytes of data:
Reply from 192.168.3.1: Destination host unreachable.
Reply from 192.168.3.1: Destination host unreachable.
Reply from 192.168.3.1: Destination host unreachable.
测试成功