双nat路由试验.doc

试验环境：一台路由器（R2）三个接口，一个接内部网络，二个接ISP1(R1)和ISP2(R3),把二个ISP的出口接入同一个交换机，然后在交换机外再接一台路由器（route），二个ISP即（R1，R3，router）走ospf 动态路由，再R2上做策略路由，根据下一跳地址来做路由决定。R3 route R2内部网络R1 R3#sh runBuilding configuration.Current configuration : 902 bytes!version 12.2service timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname R3!enable secret 5 $yd5D$PSCihTgQQhhAsLJRhZYBI.!ip subnet-zerono ip domain-lookupip host R3 !interface Loopback0ip address !interface Ethernet0ip address !interface Serial0no ip addressshutdown!interface Serial1ip address !router ospf 1router-id log-adjacency-changesredistribute connected subnetsredistribute static subnetsnetwork 55 area 0!ip classlessip route ip http server!snmp-server community public ROsnmp-server community private RWsnmp-server enable traps tty!line con 0logging synchronousline aux 0line vty 0 4password ciscologging synchronouslogin!endR3#R2#R2#sh runBuilding configuration.Current configuration : 1667 bytes!version 12.1no service single-slot-reload-enableservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname R2!logging rate-limit console 10 except errorsenable secret 5 $yOVt$dwGkyiFW674ow6bsPMdgZ0!ip subnet-zerono ip fingerno ip domain-lookupip host R2 ip host R3 !cns event-service server!interface Loopback0ip address !interface Ethernet0ip address 07 ip nat inside!interface Serial0ip address ip nat outsideclockrate 64000!interface Serial1ip address ip nat outsideclockrate 64000!interface Serial2no ip addressshutdown!interface Serial3no ip addressshutdown!interface BRI0no ip addressshutdown!ip kerberos source-interface anyip nat inside source route-map nat interface Serial1 overloadip nat inside source route-map test interface Serial0 overloadip classlessip route ip route no ip http server!access-list 1 permit 99access-list 1 permit 33access-list 1 permit 24access-list 9 permit access-list 10 permit route-map test permit 10match ip address 1match ip next-hop 9!route-map cisco permit 10!route-map nat permit 10match ip address 1match ip next-hop 10!snmp-server community public ROsnmp-server community private RW!line con 0logging synchronoustransport input noneline aux 0line vty 0 4password ciscologging synchronouslogin!endR2# R1#sh runBuilding configuration.Current configuration : 1017 bytes!version 12.1no service single-slot-reload-enableservice timestamps debug uptimeservice timestamps log uptimeno service password-encryption!hostname R1!no logging rate-limitenable secret 5 $Ogll$BSpS5/nOBq8HtaKfwOZ8W0!ip subnet-zerono ip fingerno ip domain-lookup!frame-relay switchingcns event-service server!interface Loopback0ip address !interface Ethernet0ip address !interface Serial0ip address !interface Serial1no ip address!router ospf 1router-id log-adjacency-changesredistribute connected subnetsredistribute static subnetsnetwork 55 area 0!ip kerberos source-interface anyip classlessip route ip http server!snmp-server community public ROsnmp-server community private RW!line con 0logging synchronoustransport input noneline aux 0line vty 0 4password ciscologging synchronouslogin!endR1#Router#sh runBuilding configuration.Current configuration : 769 bytes!version 12.2service timestamps debug datetime msecservice timestamps log datetime msecno service password-encryption!hostname Router!logging queue-limit 100enable secret 5 esl$iWZwf6dLviD/956PWJoOT0!memory-size iomem 25ip subnet-zero!interface Loopback0ip address !interface Ethernet0no ip addressshutdownhalf-duplex!interface FastEthernet0ip address 54 speed auto!interface Serial0no ip addressshutdown!interface Serial1no