4月22日常州培训

NAT

 

（1）
sys
sys R1
user-interface console 0
id 0 0
q
（2）配地址（终端和设备）
[R1]int g0/0/0
[R1-GigabitEthernet0/0/0]ip add 12.1.1.1 24
[R1]int g0/0/1
[R1-GigabitEthernet0/0/1]ip add 192.168.1.254 24

[R2]int g0/0/0
[R2-GigabitEthernet0/0/0]ip add 12.1.1.2 24
[R2-GigabitEthernet0/0/0]int g0/0/1
[R2-GigabitEthernet0/0/1]ip add 23.1.1.2 24

[R3]int g0/0/0
[R3-GigabitEthernet0/0/0]ip add 172.16.1.254 24
[R3-GigabitEthernet0/0/0]int g0/0/1
[R3-GigabitEthernet0/0/1]ip add 23.1.1.3 24

（3）设置默认路由
[R1]ip route-static 0.0.0.0 0.0.0.0 12.1.1.2
[R3]ip route-static 0.0.0.0 0.0.0.0 23.1.1.2

（4）测试PC1 ping 12.1.1.2  不通
（5）设置net  让pc1和client1能上网
[R1]acl 2000
[R1-acl-basic-2000]rule permit source 192.168.1.0 0.0.0.255
[R1-acl-basic-2000]int g0/0/0
[R1-GigabitEthernet0/0/0]nat outbound 2000
（5）测试PC1 ping 12.1.1.2  已通
且更换pc1地址后 仍可以通信
PC>ipconfig
IPv4 address......................: 192.168.1.100
Subnet mask.......................: 255.255.255.0
Gateway...........................: 192.168.1.254

PC>ping 12.1.1.2

Ping 12.1.1.2: 32 data bytes, Press Ctrl_C to break
From 12.1.1.2: bytes=32 seq=2 ttl=254 time=47 ms
From 12.1.1.2: bytes=32 seq=3 ttl=254 time=32 ms
（6）发布服务
[R3]int g0/0/1
    
[R3-GigabitEthernet0/0/1]nat server protocol tcp global current-interface www inside 172.16.1.1 www

Are you sure to continue?[Y/N]:y
（7）打开server1的网页服务，用client1测试页面
先ping
PC1>ping 23.1.1.3

Ping 23.1.1.3: 32 data bytes, Press Ctrl_C to break
From 23.1.1.3: bytes=32 seq=1 ttl=253 time=31 ms
如图所示：