Cisco NAT 配置文档1
Cisco NAT
配置文档
1-
动态
NAT
RT0: RT1:
LAN
：
192.168.0.0/24 LAN:192.168.1.0/24
WAN: 10.0.0 .1-10.0.0.5/8 WAN:10.0.0.5/8
RT0:
配置
配置命令很简单，主要是在实验环境中要模拟
Internet
网络环境，选择了
route rip
，或者是
ospf
也可以；
Config#interface fastEthernet 0/0 ip address 10.0.0 .1 255.0.0.0
#no shutdown //
配置外网口的
ip
地址并打开接口
Config#interface fastEthernet e1/0 ip address 192.168.0.254 255.255.255.0
#no shutdown//
配置内网接口地址，并打开；
(config)#access-list 1 permit 192.168.0.0 0.255.255.255 //
访问控制列表，定义内网的
ip
地址段
（
config
）
#ip nat pool NAT 10.0.0 .1 10.0.0.5 netmask 255.0.0.0//
定义外网网络地址池，
(
如果有多个地址池，可依次添加
)
；
（
config
）
#ip nat inside source list 1 pool NAT overload //
实现网络地址转换，
config
下将
access-list
指定的所有私网地址通过地址池进行转换
（
config
）
#interface f0/0
#ip nat outside//
定义外部接口
#interface e1/0
#ip nat inside //
定义内部接口
此时
nat
配置结束；
Building configuration...
Current configuration : 991 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
interface FastEthernet0/0
ip address 10.0.0 .1 255.0.0.0
ip nat outside
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Ethernet1/0
ip address 192.168.0.254 255.255.255.0
ip nat inside
duplex auto
speed auto
!
interface Ethernet1/1
no ip address
duplex auto
speed auto
shutdown
!
interface Ethernet1/2
no ip address
duplex auto
speed auto
shutdown
!
interface Ethernet1/3
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
network 10.0.0 .0
no auto-summary
!
ip nat pool NAT 10.0.0 .1 10.0.0.5 netmask 255.0.0.0
ip nat inside source list 1 pool NAT
ip classless
!
!
access-list 1 permit 192.0.0.0 0.255.255.255
line con 0
line vty 0 4
login
End
RT1:
Building configuration...
Current configuration : 826 bytes
!
version 12.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
interface FastEthernet0/0
ip address 10.0.0 .5 255.0.0.0
duplex auto
speed auto
!
interface FastEthernet0/1
no ip address
duplex auto
speed auto
shutdown
!
interface Ethernet1/0
ip address 192.168.1.254 255.255.255.0
duplex auto
speed auto
!
interface Ethernet1/1
no ip address
duplex auto
speed auto
shutdown
!
interface Ethernet1/2
no ip address
duplex auto
speed auto
shutdown
!
interface Ethernet1/3
no ip address
duplex auto
speed auto
shutdown
!
interface Vlan1
no ip address
shutdown
!
router rip
version 2
network 10.0.0 .0
no auto-summary
!
ip classless
line con 0
line vty 0 4
login
end
验证：
Total translations: 0 (0 static, 0 dynamic, 0 extended)
Outside Interfaces: FastEthernet0/0
Inside Interfaces: Ethernet1/0
Hits: 7 Misses: 22
Expired translations: 15
Dynamic mappings:
-- Inside Source
access-list 1 pool NAT refCount 0
pool NAT: netmask 255.0.0.0
start 10.0.0 .1 end 10.0.0.5
type generic, total addresses 5 , allocated 0 (0%), misses 0
NAT:
外出
Router#show ip nat t
Pro Inside global Inside local Outside local Outside global
icm p 10.0.0 .1:34 192.168.0.1:34 10.0.0 .5:34 10.0.0 .5:34
icm p 10.0.0 .1:35 192.168.0.1:35 10.0.0 .5:35 10.0.0 .5:35
icm p 10.0.0 .1:36 192.168.0.1:36 10.0.0 .5:36 10.0.0 .5:36
icm p 10.0.0 .1:37 192.168.0.1:37 10.0.0 .5:37 10.0.0 .5
#debug ip nat
Router#debug ip nat
IP NAT debugging is on
Router#
NAT: s=192.168.0.1-> 10.0.0 .1, d=10.0.0.5 [38]
NAT*: s= 10.0.0 .5, d=10.0.0.1->192.168.0.1 [13]
NAT: s=192.168.0.1-> 10.0.0 .1, d=10.0.0.5 [39]
NAT*: s= 10.0.0 .5, d=10.0.0.1->192.168.0.1 [14]
NAT: s=192.168.0.1-> 10.0.0 .1, d=10.0.0.5 [40]
NAT*: s= 10.0.0 .5, d=10.0.0.1->192.168.0.1 [15]
NAT: s=192.168.0.1-> 10.0.0 .1, d=10.0.0.5 [41]
NAT*: s= 10.0.0 .5, d=10.0.0.1->192.168.0.1 [16]:
本文出自 “Littlezz” 博客，转载请与作者联系！