1台服务器做双出口NAT server的配置.doc

这里使用的AR46-20做的实验，所有中低端路由器都可以这样做。1台服务器做双出口NAT server的配置/24/24E1/0/0/24/24/24/24E0/0/0/24E0/0//24/24AR46-20/24NAT转换图 用户的server只有一块网卡，要求在AR46-20上e0/0/0接口连接网通，e0/0/1接口连接电信，在两个接口上都要做nat server指向内网的服务器。 要实现用户的需求必须要保证在e0/0/0接口进入的访问服务器的外网报文要能从e0/0/0口返回给外网，在e0/0/1接口进入的访问服务器的外网报文要能从e0/0/1口返回给外网。所以在服务器的一块网卡上要配置两个ip地址，在路由器连接服务器的接口上必须要配置策略路由才能实现。具体的配置信息如下：dis ver Copyright Notice: All rights reserved (Aug 17 2005). Without the owners prior written consent, no decompiling nor reverse-engineering shall be allowed. Huawei-3Com Versatile Routing Platform Software VRP(R) software, Version 3.40, Release RT-0013 Copyright (c) 2003-2005 Hangzhou Huawei-3Com Tech. Co.,Ltd. All rights reserved. Copyright (c) 2000-2003 Huawei Tech. Co.,Ltd. All rights reserved. Quidway AR46-20 uptime is 0 week, 0 day, 1 hour, 25 minutes Rpus version information: Router AR46-20 with 1 PowerPC 750 Processor 256M bytes SDRAM 32M bytes FLASH 512K bytes NVRAM Pcb Version : RTM1RPUA.2 RPE Logic Version : RPE3.4 SBG Logic Version : 012 Small BootROM Version : 3.07 Big BootROM Version : 5.14 Config Register points to FLASH SLOT 0 AUX0 (Hardware)A.2, (Driver)1.0, (Cpld)3.4 SLOT 0 ETH0 (Hardware)A.2, (Driver)1.0, (Cpld)3.4 SLOT 0 ETH1 (Hardware)A.2, (Driver)1.0, (Cpld)3.4 SLOT 1 2FE (Hardware)2.1, (Driver)2.0, (Cpld)0.0 SLOT 2 E1VI (Hardware)1.0, (Driver)2.7, (Cpld)1.0dis cur# sysname NAT# FTP server enable# l2tp domain suffix-separator #radius scheme system#domain system#local-user admin password cipher .USE=B,53Q=QMAF4TX$_S#6.NM(0=0)*5WWQ=QMAF4TX$_S#6.N service-type telnet terminal level 3 service-type ftp#controller E1 2/0/0 using e1#interface Aux0 async mode flow#interface Ethernet0/0/0 ip address nat server protocol icmp global inside #interface Ethernet0/0/1 ip address nat server protocol icmp global inside #interface Ethernet1/0/0 ip address ip address sub ip policy route-policy nat#interface Ethernet1/0/1 ip address dhcp-alloc#interface Serial2/0/0:0 link-protocol ppp ip address ppp-negotiate#interface NULL0#acl number 2000 rule 0 permit source 55 rule 1 denyacl number 2001 rule 0 permit source 55 rule 1 deny#route-policy nat permit node 10 if-match acl 2000 apply ip-address next-hop （如果是拨号口，可以写output-interface接口号）route-policy nat permit node 20 if-match acl 2001 apply ip-address next-hop （如果是拨号口，可以写output-interface接口号）# ip route-static preference 60 ip route-static preference 60#user-interface con 0user-interface aux 0user-interface vty 0 4 authentication-mode scheme#returnt m% Current terminal monitor is ont d% Current terminal debugging is ondebug ip packet *0.5124410 NAT IP/8/debug_case:Receiving, interface = Ethernet0/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 3718, offset = 0, ttl = 255, protocol = 1, checksum = 55837, s = , d = prompt: Receiving IP packet from Ethernet0/0/0*0.5124750 NAT IP/8/debug_case:Sending, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 3718, offset = 0, ttl = 254, protocol = 1, checksum = 9334, s = , d = prompt: Sending the packet from Ethernet0/0/0 at Ethernet1/0/0*0.5125110 NAT IP/8/debug_case:Receiving, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8185, offset = 0, ttl = 128, protocol = 1, checksum = 37123, s = , d = prompt: Receiving IP packet from Ethernet1/0/0*0.5125450 NAT IP/8/debug_case:Sending, interface = Ethernet0/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8185, offset = 0, ttl = 127, protocol = 1, checksum = 18603, s = , d = prompt: Sending the packet from Ethernet1/0/0 at Ethernet0/0/0*0.5125800 NAT IP/8/debug_case:Receiving, interface = Ethernet0/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 3719, offset = 0, ttl = 255, protocol = 1, checksum = 55836, s = , d = prompt: Receiving IP packet from Ethernet0/0/0*0.5126140 NAT IP/8/debug_case:Sending, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 3719, offset = 0, ttl = 254, protocol = 1, checksum = 9333, s = , d = prompt: Sending the packet from Ethernet0/0/0 at Ethernet1/0/0*0.5126500 NAT IP/8/debug_case:Receiving, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8186, offset = 0, ttl = 128, protocol = 1, checksum = 37122, s = , d = prompt: Receiving IP packet from Ethernet1/0/0*0.5126840 NAT IP/8/debug_case:Sending, interface = Ethernet0/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8186, offset = 0, ttl = 127, protocol = 1, checksum = 18602, s = , d = prompt: Sending the packet from Ethernet1/0/0 at Ethernet0/0/0*0.5127190 NAT IP/8/debug_case:Receiving, interface = Ethernet0/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 3720, offset = 0, ttl = 255, protocol = 1, checksum = 55835, s = , d = prompt: Receiving IP packet from Ethernet0/0/0*0.5127530 NAT IP/8/debug_case:Sending, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 3720, offset = 0, ttl = 254, protocol = 1, checksum = 9332, s = , d = prompt: Sending the packet from Ethernet0/0/0 at Ethernet1/0/0*0.5127890 NAT IP/8/debug_case:Receiving, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8187, offset = 0, ttl = 128, protocol = 1, checksum = 37121, s = , d = prompt: Receiving IP packet from Ethernet1/0/0*0.5128230 NAT IP/8/debug_case:Sending, interface = Ethernet0/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8187, offset = 0, ttl = 127, protocol = 1, checksum = 18601, s = , d = prompt: Sending the packet from Ethernet1/0/0 at Ethernet0/0/0*0.5128580 NAT IP/8/debug_case:Receiving, interface = Ethernet0/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 3721, offset = 0, ttl = 255, protocol = 1, checksum = 55834, s = , d = prompt: Receiving IP packet from Ethernet0/0/0*0.5128920 NAT IP/8/debug_case:Sending, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 3721, offset = 0, ttl = 254, protocol = 1, checksum = 9331, s = , d = prompt: Sending the packet from Ethernet0/0/0 at Ethernet1/0/0*0.5129280 NAT IP/8/debug_case:Receiving, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8188, offset = 0, ttl = 128, protocol = 1, checksum = 37120, s = , d = prompt: Receiving IP packet from Ethernet1/0/0*0.5129620 NAT IP/8/debug_case:Sending, interface = Ethernet0/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8188, offset = 0, ttl = 127, protocol = 1, checksum = 18600, s = , d = prompt: Sending the packet from Ethernet1/0/0 at Ethernet0/0/0*0.5129970 NAT IP/8/debug_case:Receiving, interface = Ethernet0/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 3722, offset = 0, ttl = 255, protocol = 1, checksum = 55833, s = , d = prompt: Receiving IP packet from Ethernet0/0/0*0.5130310 NAT IP/8/debug_case:Sending, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 3722, offset = 0, ttl = 254, protocol = 1, checksum = 9330, s = , d = prompt: Sending the packet from Ethernet0/0/0 at Ethernet1/0/0*0.5130670 NAT IP/8/debug_case:Receiving, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8189, offset = 0, ttl = 128, protocol = 1, checksum = 37119, s = , d = prompt: Receiving IP packet from Ethernet1/0/0*0.5131010 NAT IP/8/debug_case:Sending, interface = Ethernet0/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8189, offset = 0, ttl = 127, protocol = 1, checksum = 18599, s = , d = prompt: Sending the packet from Ethernet1/0/0 at Ethernet0/0/0*0.5142230 NAT IP/8/debug_case:Receiving, interface = Ethernet0/0/1, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 54239, offset = 0, ttl = 255, protocol = 1, checksum = 28356, s = , d = prompt: Receiving IP packet from Ethernet0/0/1*0.5142570 NAT IP/8/debug_case:Sending, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 54239, offset = 0, ttl = 254, protocol = 1, checksum = 49692, s = , d = prompt: Sending the packet from Ethernet0/0/1 at Ethernet1/0/0*0.5142930 NAT IP/8/debug_case:Receiving, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8190, offset = 0, ttl = 128, protocol = 1, checksum = 62462, s = , d = prompt: Receiving IP packet from Ethernet1/0/0*0.5143270 NAT IP/8/debug_case:Sending, interface = Ethernet0/0/1, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8190, offset = 0, ttl = 127, protocol = 1, checksum = 41638, s = , d = prompt: Sending the packet from Ethernet1/0/0 at Ethernet0/0/1*0.5143620 NAT IP/8/debug_case:Receiving, interface = Ethernet0/0/1, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 54240, offset = 0, ttl = 255, protocol = 1, checksum = 28355, s = , d = prompt: Receiving IP packet from Ethernet0/0/1*0.5143960 NAT IP/8/debug_case:Sending, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 54240, offset = 0, ttl = 254, protocol = 1, checksum = 49691, s = , d = prompt: Sending the packet from Ethernet0/0/1 at Ethernet1/0/0*0.5144320 NAT IP/8/debug_case:Receiving, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8191, offset = 0, ttl = 128, protocol = 1, checksum = 62461, s = , d = prompt: Receiving IP packet from Ethernet1/0/0*0.5144660 NAT IP/8/debug_case:Sending, interface = Ethernet0/0/1, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8191, offset = 0, ttl = 127, protocol = 1, checksum = 41637, s = , d = prompt: Sending the packet from Ethernet1/0/0 at Ethernet0/0/1*0.5145010 NAT IP/8/debug_case:Receiving, interface = Ethernet0/0/1, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 54241, offset = 0, ttl = 255, protocol = 1, checksum = 28354, s = , d = prompt: Receiving IP packet from Ethernet0/0/1*0.5145350 NAT IP/8/debug_case:Sending, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 54241, offset = 0, ttl = 254, protocol = 1, checksum = 49690, s = , d = prompt: Sending the packet from Ethernet0/0/1 at Ethernet1/0/0*0.5145710 NAT IP/8/debug_case:Receiving, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8192, offset = 0, ttl = 128, protocol = 1, checksum = 62460, s = , d = prompt: Receiving IP packet from Ethernet1/0/0*0.5146050 NAT IP/8/debug_case:Sending, interface = Ethernet0/0/1, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8192, offset = 0, ttl = 127, protocol = 1, checksum = 41636, s = , d = prompt: Sending the packet from Ethernet1/0/0 at Ethernet0/0/1*0.5146400 NAT IP/8/debug_case:Receiving, interface = Ethernet0/0/1, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 54242, offset = 0, ttl = 255, protocol = 1, checksum = 28353, s = , d = prompt: Receiving IP packet from Ethernet0/0/1*0.5146740 NAT IP/8/debug_case:Sending, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 54242, offset = 0, ttl = 254, protocol = 1, checksum = 49689, s = , d = prompt: Sending the packet from Ethernet0/0/1 at Ethernet1/0/0*0.5147100 NAT IP/8/debug_case:Receiving, interface = Ethernet1/0/0, version = 4, headlen = 20, tos = 0, pktlen = 84, pktid = 8193, offset = 0, ttl = 128, protocol = 1, checksum = 62459, s = , d = prompt: Receiving IP packet from Ethernet1/0/0*0.5147440 NAT IP/8/debug_case:Sen