刘雄NAT配置实例(NATP)秒会.ppt

星云科技有限公司,刘雄,NAPT实验,刘雄,基本命令,# 进入系统视图 sys # 配置设备名 H3Csysname RouterA # 设置super(明文)密码 RouterAsuper password simple quidway # 设置super(密文)密码 RouterAsuper password cipher quidway,基本命令,# 启用telnet 管理功能 RouterAuser-interface vty 0 4 RouterA-ui-vty0-4authentication-mode password RouterA-ui-vty0-4set authentication password quidway RouterA-ui-vty0-4user privilege level 3 RouterA-ui-vty0-4quit RouterAtelnet server enable,基本命令,# 配置端口IP地址 RouterAint e 0 RouterA-Ethernet0ip add 192.168.1.1 24 # 启动端口 RouterA-Ethernet0undo shutdown RouterA-Ethernet0quit,配置 NATP,配置ACL 用于判断哪些数据包的地址应被转换 被ACL允许（permit）的报文将被进行NAT转换，被拒绝（deny）的报文将不会被转换 配置地址池 nat address-group group-number start-addr end-addr 配置地址转换 nat outbound acl-number address-group group-number no-pat,NAPT配置举例,10.0.0.1,RTA,10.0.0.254/24,198.76.28.1/24,10.0.0.2,Internet,Server,地址池 （198.76.28.11）,Internet,# 通过ACL定义一条rule，匹配源地址属于10.0.0.0/24网段的数据 RTAacl number 2000 RTA-acl-basic-2000rule 0 permit source 10.0.0.0 0.0.0.255 # 配置NAT地址池1，地址池中只放入一个地址198.76.28.11 RTAnat address-group 1 198.76.28.11 # 进入接口模式视图 RTAinterface Ethernet0/1 # 将地址池1与acl 2000关联，并在接口出方向上应用NAT RTA-Ethernet0/1nat outbound 2000 address-group 1,Eth0/1,RT2,RT1,198.76.29.4/24,RT2,sys H3Csysname RT2 RT2interface Serial 0/2/0 RT2-Serial0/2/0ip add 10.0.0.2 8 RT2-Serial0/2/0undo shutdown RT2-Serial0/2/0ospf RT2-ospf-1area 1 RT2-ospf-1-area-0.0.0.1network 10.0.0.0 0.255.255.255,RTA,RTA: RTAsysname RTA RTAinterface Serial 0/2/0 RTA-Serial0/2/0ip add 10.0.0.1 8 RTAinterface Serial 0/2/2 RTA-Serial0/2/2ip add 198.168.10.1 24 RTA-Serial0/2/2undo shutdown RTA-Serial0/2/2ospf RTA-ospf-1area 1 RTA-ospf-1-area-0.0.0.1network 10.0.0.0 0.255.255.255 RTA-ospf-1-area-0.0.0.1network 198.168.10.0 0.0.0.255 RTA-ospf-1-area-0.0.0.1quit RTAfirewall enable RTAacl number 2000 RTA-acl-basic-2000rule 0 permit source 10.0.0.0 0.0.0.255 RTA-acl-basic-2000quit RTAnat address-group 1 198.168.10.10 198.168.10.10 RTAinterface Serial 0/2/2 RTA-Serial0/2/2nat outbound 2000 address-group 1 no-pat,Server,sys H