CISCO NAT 技术

 

如果不太懂地址转换（ NAT ）就进来看看， 绝对精彩

******************************* 全部采用端口 ************************
ISP 分配的 IP202.99.160.129

HP0-841 MB2-185 MB2-186 mb2-422 MB4-174 MB4-175 MB4-217 MB4-348 MB5-229 MB6-285 MB6-502interface fastethernet0/0
ip address 192.168.1.1 255.255.255.0
duplex auto
speed auto
in nat inside
no shutdown

interface fastethernet0/1
ip address 192.168.2..1 255.255.255.0
duplex auto
speed auto
in nat outside
no shutdown

ip nat pool OnlyYou 202.99.160.130 202.99.160.130 netmask 255.255.255.252
//OnlyYou 代表地址池的名称。 2 个 202.99.160.130 是代表只用一个 ip 做转换后 ip.
access-list 1 permit 192.168.1.0 0.0.0 .255
access-list 1 permit 192.168.2.0 0.0.0.255
ip nat inside source list1 pool OnlyYou overload




*********************** 动态地址转换 + 端口 ***********************
ISP 分配的 IP 有： 202.99.160.130~190 255.255.255.192

Interface fastethernet0/1
Ip address 192.168.1.1 255.255.255.0
Ip address 192.168.2.1 255.255.255.0 secondary
Duplex auto
Speed auto
Ip nat inside
No shutdown

Interface serial 0/0
Ip address 202.99.160.129 255.255.255.192
Duplex auto
Speed auto
Ip nat outside
No shutdwon

Ip nat pool OutPort 202.99.160.190 202.99.160.190 netmask 255.255.255.192
Ip nat pool OutPool 202.99.160.130 202.99.160.190 netmask 255.255.255.192
Ip nat inside source list1 pool OutPort //192.168.1.0 段主机全部转成 202.99.160.190
Ip nat inside source list2 pool OutPool
// 出于访问 ftp 站点等考虑： 192.168.2.0 和 192.168.3.0 段主机全部
// 转成 202.99.160.130 到 202.99.160.189 中的所有地址。
Access-list1 permit 192.168.1.0 0.0.0.255
Access-list2 permit 192.168.2.0 0.0.0.255
Access-list2 permit 192.168.3.0 0.0.0.255



*********************** 静态地址转换 ***********************


ISP 分配的 IP 地址是 :211.82.220.80~211.82.220.87
211.82.220.81 255.255.255.248
要求 Intranet 上的 Web.E-mail.Ftp.Media 可以被外部访问 .
Interface fastethernet0/0
Ip address 192.168.1.1 255.255.255.0
Duplex auto
Speed auto
Ip nat inside
No shutdown

Interface fastethernet0/1
Ip address 211.82.220.81 255.255.255.248
Speed auto
Duplex auto
Ip nat outside
No shutdown

Ip nat pool Outpool 211.82.220.86 211.82.20.86 netmask 255.255.255.248
Access-list 1 permit 192.168.1.2 0.0.0.255
Access-list 1 permit 192.168.1.3 0.0.0.255
Access-list 1 permit 192.168.1.4 0.0.0.255
Access-list 1 permit 192.168.1.5 0.0.0.255
Ip nat inside source list1 pool Outpool overload
Ip nat inside source static 192.168.1.2 211.82.220.82
Ip nat inside source static 192.168.1.3 211.82.220.83
Ip nat inside source static 192.168.1.4 211.82.220.84
Ip nat inside source static 192.168.1.5 211.82.220.85




******************NAT< MB6-502  MB7-222  MB7-224  MB7-231  MCSE-2003 exams MCSA exams MCP exams cisco span style="font-size: 9pt; color: #333333; font-family: 宋体; mso-ascii-font-family: tahoma; mso-hansi-font-family: tahoma; mso-bidi-font-family: tahoma; mso-font-kerning: 0pt">映射 ****************************
如果 ISP 提供的 IP 地址比较多还可以 , 但如果不是的时候 ( 如就两个时 ), 一个用于内网地址转换 , 另一个用于对外网提供服务 .
ISP 提供的内网上网 IP

Interface ethernet0
Ip address 192.168.1.1 255.255.255.0
Duplex auto
Speed auto
Ip nat inside
No shutdown
Interface fastethernet0/0
Ip address 211.82.220.129 255.255.255.248
Duplex auto
Speed auto
Ip nat outside
No shutdown

Access-list 1 permit 192.168.1.0 0.0.0.255
Ip nat pool Everybody 211.82.220.130 211.82.220.130 network 255.255.255.252
Ip nat inside source list1 pool Everybody overload
Ip nat inside source static tcp 192.168.1.2 80 202.99.220.130 80
Ip nat inside source static tcp 192.168.1.3 21 202.99.220.130 21
Ip nat inside source static tcp 192.168.1.4 25 202.99.220.130 25
Ip nat inside source static tcp 192.168.1.5 110 202.99.220.130 110



******************* 利用地址转换实现负载均衡 ********************
; 当有如象腾讯公司似的多服务器时 , 使用路由器实现负载平衡 , 可以使它们有平等的访问机会 .
Interface fastethernet0/1
Ip address 192.168.1.1 255.255.255.0
Duplex auto
Speed auto
Ip nat inside
No shutdown

Interface fastethernet0/0
Ip address 202.110.198.81 255.2555.255.248
Duplex auto
Speed auto
Ip nat outside
Access-list 1 permit 202.110.198.82
Access-list 2 permit 202.110.198.83
Access-list 3 permit 192.168.1.0 0.0.0.255
Ip nat pool Webser 192.168.1.2 192.168.1.3 255.255.255.248 type rotary
Ip nat pool Ftpser 192.168.1.4 192.168.1.5 255.255.255.248 type rotary
Ip nat pool normal 202.110.198.84 202.110.198.84 netmask 255.255.255.248
Ip nat inside destination list 1 pool Webser
Ip nat inside destination list 2 pool Ftpser