静态NAT地址转换

静态NAT地址转换

实现静态NAT地址转换功能。将路由器2501的E0作为内部端口，同步端口S0作为外部端口。其中10.1.1.2，10.1.1.3，10.1.1.4的内部本地地址采用静态地址转换。其内部合法地址分别对应为192.1.1.2，192.1.1.3，192.1.1.4。

Router>enableRouter#configterminalRouter(config)#hostnameRouter0Router0(config)#interfacefastEthernet0/0Router0(config-if)#ipaddress192.168..1.1

255.255.255.0Router0(config-if)#noshutdownRouter0(config-if)#exitRouter0(config)#interfaceserial3/0Router0(config-if)#ipaddress192.1.1.1255.255.255.0Router0(config-if)#exitRouter0(config)#ipnatinsidesourcestatic192.168.1.1192.1.1.2//配置静态地址映射关系Router0(config)#ipnatinsidesourcestatic192.168.1.2192.1.1.3Router0(config)#ipnatinsidesourcestatic192.168.1.1.4192.1.1.4Router0(config)#ipnatinsidesourcestatic10.1.1.1192.1.1.1Router0(config)#interfacefastEthernet0/0Router0(config-if)#ipnatinside//配置端口E0为内部接口Router0(config-if)#noshutdownRouter0(config-if)#exitRouter0(config)#interfaceserial/0Router0(config-if)#ipnatoutside//配置端口S0为外部接口Router0(config-if)#noshutdownRouterA(config-if)#clockrate64000RouterA(config-if)#noshutdownRouterA(config-if)#endRouterA#ping10.1.1.2RouterA#showipnatstatisticsTotaltranslations:4(4static,0dynamic,0extended)OutsideInterfaces:Serial2/0InsideInterfaces:FastEthernet0/0RouterA#showipnattranslationsProInsideglobalInsidelocalOutsidelocalOutsideglobal---192.1.1.110.1.1.1---------192.1.1.210.1.1.2---------192.1.1.310.1.1.3---------192.1.1.410.1.1.4------RouterA#Switch>enableSwitch#configterminalSwitch(config)#interfacevlan1Switch(config-if)#ipaddress192.168.1.4255.255.255.0Switch(config-if)#noshutdown配置PC0-PC2PC0IPAddress............:192.168.1.2SubnetMask...........:255.255.255.0DefaultGateway.........:192.168.1.1PC1IPAddress............:192.168.1.3SubnetMask...........:255.255.255.0DefaultGateway.........:192.168.1.1PC2

IPAddress............:202.102.1.2SubnetMask...........:255.255.255.0DefaultGateway.........:202.102.1.1配置完成后可以用以下语句进行查看：Router0#showipnattranslationsRouter0#showipnatstatisticsPAT（端口地址转换）配置

本实例实现PAT地址转换功能。将路由器2514的E0作为内部端口，同步端口E1作为外部端口。其中192.168.1.0为内部本地地址网段。其内部有一个全局地址202.98.38.1，这个地址配置在路由器E1口。

交换机Switch02960-24TT一台，接三台PC（PC0：192.168.1.2/24，DefaultGateway192.168.1.1；;PC1：192.168.1.3/24,DefaultGateway192.168.1.1:PC2：202.102.1.2/24

DefaultGateway202.102.1.1），一台2514路由器（RouerA:E0：192.168.1.1/24；E1：202.98.38.1/24）。配置路由器Router>enableRouter#configterminalRouter(config)#hostnameRouterARouterA(config)#interfacefastEthernet0/0RouterA(config-if)#ipaddress192.168.1.1255.255.255.0RouterA(config-if)#ipnatinsideRouterA(config-if)#noshutdownRouterA(config-if)#exitRouterA(config)#interfacefastEthernet1/0RouterA(config-if)#ipaddress202.102.1.5255.255.255.0RouterA(config-if)#ipnatoutsideRouterA(config-if)#noshutdownRouterA(config-if)#exitRouter0(config)#ipnatpoolaa202.102.1.2202.102.1.10netmask255.255.255.0Router0(config)#access-list1permit192.168.1.00.0.0.255Router0(config)#ipnatinsidesourcelist1poolaaRouter0#showipaccess-listsSwitch>enableSwitch#configterminalSwitch(config)#interfacevlan1Switch(config-if)#ipaddress192.168.1.1255.255.255.0配置PC1与PC2PC1IPAddress............:192.168.1.2SubnetMask...........:255.255.255.0DefaultGateway.........:192.168.1.1C>

ipconfig/ip192.168.1.2255.255.255.0C>ipconfig/dg192.168.1.1PC2IPAddress............:202.98.38.5SubnetMask...........:255.255.255.0DefaultGateway.........:202.98.38.1C>

ipconfig/ip202.98.8.5255.255.255.0C>ipconfig/dg202.98.38.1PC1：

C:>ping202.98.38.1

C:>ping202.98.38.5PC2：C:>ping202.98.38.1配置完成后可以用以下语句进行查看：RouterA#showipnattranslationsPC>ping202.98.38.1Pinging202.98.38.1with32bytesofdata:Replyfrom202.98.38.1:bytes=32time=63msTTL=255Replyfrom202.98.38.1:bytes=32time=62msTTL=255Replyfrom202.98.38.1:bytes=32time=62msTTL=255Replyfrom202.98.38.1:bytes=32time=63msTTL=255Pingstatisticsfor202.98.38.1:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Minimum=62ms,Maximum=63ms,Average=62msPC>ping202.98.38.5Pinging202.98.38.5with32bytesofdata:Replyfrom202.98.38.5:bytes=32time=93msTTL=127Replyfrom202.98.38.5:bytes=32time=94msTTL=127Replyfrom202.98.38.5:bytes=32time=93msTTL=127Replyfrom202.98.38.5:bytes=32time=94msTTL=127Pingstatisticsfor202.98.38.5:Packets:Sent=4,Received=4,Lost=0(0%loss),Approximateroundtriptimesinmilli-seconds:Minimum=93ms,Maximum=94ms,Average=93msC>RouterA#showipnattranslationsProInsideglobalInsidelocalOutsidelocalOutsideglobalicmp202.98.38.2:4