NAT实验

 

 1、2个PC配置静态IP ,各个路由器写入IP

R2

[Huawei]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.2 24
[Huawei-GigabitEthernet0/0/0]q
[Huawei]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 192.168.12.1 24
[Huawei-GigabitEthernet0/0/1]q
 

R4

[Huawei]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.12.2 24

[Huawei-GigabitEthernet0/0/0]q

[Huawei]int g 0/0/2
[Huawei-GigabitEthernet0/0/2]ip add 192.168.2.2 24

[Huawei-GigabitEthernet0/0/2]q
[Huawei]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]ip add 23.0.0.1 24
 

R5

[Huawei]int g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 23.0.0.2 24

[Huawei-GigabitEthernet0/0/0]q
[Huawei]int g 0/0/1

[Huawei-GigabitEthernet0/0/1]ip add 34.0.0.1 24

telnet

[Huawei]user-interface vty 0 4
[Huawei-ui-vty0-4]authentication-mode aaa
[Huawei-ui-vty0-4]q
[Huawei]aaa
[Huawei-aaa]local-user huawei password cipher 123456
Info: Add a new user.
[Huawei-aaa]local-user huawei privilege level 15
[Huawei-aaa]local-user huawei service-type telnet
[Huawei-aaa]q

2、配置内网，使内网可通

R2

[Huawei]ospf 1 router-id 1.1.1.1
[Huawei-ospf-1]area 0

[Huawei-ospf-1-area-0.0.0.0]network 192.168.1.2  0.0.0.0
 

R4

[Huawei]ospf 1 router-id 2.2.2.2
[Huawei-ospf-1]area 0
[Huawei-ospf-1-area-0.0.0.0]network 192.168.12.2 0.0.0.0
[Huawei-ospf-1-area-0.0.0.0]network 192.168.2.2 0.0.0.0

r4缺省路由

[Huawei]ip route-static 0.0.0.0 0 23.0.0.3
r2下发缺省路由:

[Huawei]ospf 1
[Huawei-ospf-1]default-route-advertise
 

3、地址转换，使全网（内外网之间）可通

在边界设备r4上接口上，

[Huawei]ip route-static 0.0.0.0 0 23.0.0.3
[Huawei]ospf 1
[Huawei-ospf-1]default-route-advertise
[Huawei-ospf-1]q
[Huawei]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]nat static global 23.0.0.10 inside 192.168.1.1

[Huawei-GigabitEthernet0/0/1]nat static global 23.0.0.20  inside 192.168.2.1

4、在telnet上使test1可访问

[Huawei]in g 0/0/0
[Huawei-GigabitEthernet0/0/0]ip add 192.168.1.3 24
[Huawei-GigabitEthernet0/0/0]q
[Huawei]ip route-static 0.0.0.0 0 34.0.0.2

5、PC1可以访问test1,PC2不可以

R5

[Huawei]acl 2000
[Huawei-acl-basic-2000]rule permit source 192.168.1.1 0.0.0.0
[Huawei-acl-basic-2000]rule deny source 192.168.2.1 0.0.0.0
[Huawei-acl-basic-2000]q
[Huawei]int g 0/0/1
[Huawei-GigabitEthernet0/0/1]traffic-filter outbound acl 2000