软件Z092苑红尚094372
实验二
一实验目的
1. 掌握静态NAT的特征、配置及调试方法。
2. 掌握动态NAT的特征、配置及调试方法。
3. 掌握NAPT的特征、配置及调试方法。
二实验设备
神州数码路由器主机
三实验拓扑
软件Z092苑红尚094372
四配置步骤
路由器A配置基本信息
Router#config
Router_config#int f0/3
Router_config_f0/3#ip add 192.168.1.1255.255.255.0
Router_config_f0/3#no shut
Router_config_f0/3#exit
Router_config#int f0/0
Router_config_f0/0#ip add 200.1.1.1255.255.255.0
Router_config_f0/0#no shut
Router_config_f0/0#exit
Router_config#router rip
Router_config_rip#network 200.1.1.0
Router_config_rip#^Z
Router#Jan 100:14:58 Configured from console 0 by
Router#show ip route
Codes:C-connected,S- static,R-RIP,B-BGP,BC-B GP connectedD-DEIGRP,DEX-external DEIGRP,O-OSPF,OIA-OSPF inter areaON 1 -OSPF NSSA external type 1,ON2-OSPF NSSA external type 2OE 1 -OSPF external type 1,OE2-OSPF external type 2
软件Z092苑红尚094372
DHCP-DHCP type,L1 - IS-IS level-1,L2- IS-IS level-2
VRF ID:0
C 192.168.1.0/24 is directly connected,FastEthernet0/3
C 200.1.1.0/24 is directly connected,FastEthernet0/0
R 202.1.1.0/24 [120,1]via 200.1.1.2(on FastEthernet0/0)路由器B
Router#config
Router_config#int f0/3
Router_config_f0/3#ip add 202.1.1.1255.255.255.0
Router_config_f0/3#no shut
Router_config#int f0/0
Router_config_f0/0#ip add 200.1.1.2255.255.255.0
Router_config_f0/0#no shut
Router_config_f0/0#exit
Router_config#router rip
Router_config_rip#network 202.1.1.0
Router_config_rip#network 200.1.1.0
Router_config_rip#^Z
Router#Jan 100:15:19 Configured from console 0 by
Router#show ip route
Codes:C-connected,S- static,R-RIP,B-BGP,BC-B GP connectedD-DEIGRP,DEX-external DEIGRP,O-OSPF,OIA-OSPF inter areaON 1 -OSPF NSSA external type 1,ON2-OSPF NSSA external type 2OE 1 -OSPF external type 1,OE2-OSPF external type 2
DHCP-DHCP type,L1 - IS-IS level-1,L2- IS-IS level-2
VRF ID:0
C 200.1.1.0/24 is directly connected,FastEthernet0/0
C 202.1.1.0/24 is directly connected,FastEthernet0/3
Router#
路由器A配置静态NAT
Router#config
Router_config#ip nat inside source static 192.168.1.10200.1.1.3
Router_config#ip nat inside source static 192.168.1.20200.1.1.4
Router_config#int f0/3
Router_config_f0/3#ip nat inside
Router_config_f0/3#int f0/0
Router_config_f0/0#ip nat outside
Router_config_f0/0#^Z
软件Z092苑红尚094372
Router#Jan 100:19:28 Configured from console 0 by
Router#show ip nat transtranslations --Translation entries
Router#show ip nat translations
Pro.Dir Inside local Inside global Outside local Outside global---- --- 192.168.1.10 200.1.1.3 --- ------- --- 192.168.1.20 200.1.1.4 --- ---Router#
配置动态NAT
Router#config
Router_config#no ip nat inside source static 192.168.1.10200.1.1.3
Router_config#no ip nat inside source static 192.168.1.20200.1.1.4
Router_config#ip nat pool aaa 200.1.1.100200.1.1.200255.255.255.0
Router_config#ip access-list standard 1
Router_config_std_nacl#deny 192.168.1.40
Router_config_std_nacl#permit 192.168.1.00.0.0.255
Router_config_std_nacl#exit
Router_config#ip nat inside source list 1 pool aaa
Router_config#^Z
Router#Jan 100:07:01 Configured from console 0 by
Router#show ip route
Codes:C-connected,S- static,R-RIP,B-BGP,BC-B GP connected
D-DEIGRP,DEX-external DEIGRP,O-OSPF,OIA-OSPF inter areaON 1 -OSPF NSSA external type 1,ON2-OSPF NSSA external type 2OE 1 -OSPF external type 1,OE2-OSPF external type 2
DHCP-DHCP type,L1 - IS-IS level-1,L2- IS-IS level-2
VRF ID:0
C 192.168.1.0/24 is directly connected,FastEthernet0/3
C 200.1.1.0/24 is directly connected,FastEthernet0/0
R 202.1.1.0/24 [120,1]via 200.1.1.2(on FastEthernet0/0)Router#show ip nat trantranslations --Translation entries
Router#show ip nat translations
软件Z092苑红尚094372
Router#
Router#c onf
Router_config#ip access-list standard 1
Router_config_std_nacl#permit 192.168.1.0255.255.255.0Router_config_std_nacl#^Z
Router#Jan 100:13:57 Configured from console 0 byRouter#show run
Building configuration. . .
Current configuration:
!
!version 1.3.3Hservice timestamps log dateservice timestamps debug dateno service password-encryption
!
!
!
!
!
!
!gbsc group default
!
!
!
!
!
!
!
!
!
!
!
!interface FastEthernet0/0ip address 200.1.1.1255.255.255.0no ip directed-broadcastip nat outside
!interface FastEthernet0/3ip address 192.168.1.1255.255.255.0no ip directed-broadcast
软件Z092苑红尚094372
ip nat inside
!interface Serial0/1no ip addressno ip directed-broadcast
!interface Serial0/2no ip addressno ip directed-broadcast
!interface Async0/0no ip addressno ip directed-broadcast
!
!
!
!router ripnetwork 200.1.1.0
!
!
!
!
!
!
!
!
!
!
!
!
!ip access-list standard 1deny 192.168.1.40255.255.255.255permit 192.168.1.0255.255.255.0
!
!
!
!
!
!ip nat pool aaa 200.1.1.100200.1.1.200255.255.255.0ip nat inside source list 1 pool aaa
软件Z092苑红尚094372
!
!
!
Router#
配置NAPT
Router#config
Router_config#no ip nat inside source list 1 pool aaa
Router_config#no ip nat pool aaa
Router_config#no ip access-list standard 1
Router_config#ip nat pool bbb 200.1.1.1200.1.1.1255.255.255.0
Router_config#ip access-list standard 10
Router_config_std_nacl#permit 192.168.1.0255.255.255.0
Router_config_std_nacl#exit
Router_config#ip nat inside source list 10 pool bbb overload
Router_config#^Z
Router#Jan 100:25:55 Configured from console 0 by
Router#show ip nat
Incomplete command
Router#show ip nat trantranslations --Translation entries
Router#show ip nat translations
Pro.Dir Inside local Inside global Outside local Outside global
ICMP OUT 192.168.1.20:512 200.1.1.1:33280 202.1.1.10:33280 202.1.1.10:332
80
ICMP OUT 192.168.1.40:512 200.1.1.1:25088 202.1.1.10:25088 202.1.1.10:250
88
ICMP OUT 192.168.1.30:512 200.1.1.1:16896 202.1.1.10:16896 202.1.1.10:168
96
ICMP OUT 192.168.1.10:512 200.1.1.1:8704 202.1.1.10:8704 202.1.1.10:870
4
Router#
五实验结果各种验证指令及结果
Ping 202.1.1.10
静态NAT
Pc0
软件Z092苑红尚094372
Pc1
Pc2
软件Z092苑红尚094372
Pc3
动态NAT
Pc0:
华纳云(HNCloud Limited)是一家专业的全球数据中心基础服务提供商,总部在香港,隶属于香港联合通讯国际有限公司,拥有香港政府颁发的商业登记证明,保证用户的安全性和合规性。 华纳云是APNIC 和 ARIN 会员单位。主要提供香港和美国机房的VPS云服务器和独立服务器。商家支持支付宝、网银、Paypal付款。华纳云主要面向国内用户群,所以线路质量还是不错的,客户使用体验总体反响还是比较好...
WebHorizon是一家去年成立的国外VPS主机商,印度注册,提供虚拟主机和VPS产品,其中VPS包括OpenVZ和KVM架构,有独立IP也有共享IP,数据中心包括美国、波兰、日本、新加坡等(共享IP主机可选机房更多)。目前商家对日本VPS提供一个8折优惠码,优惠后最低款OpenVZ套餐年付10.56美元起。OpenVZCPU:1core内存:256MB硬盘:5G NVMe流量:200GB/1G...
不知道大家是否注意到sharktech的所有服务器的带宽价格全部跳楼跳水,降幅简直不忍直视了,还没有见过这么便宜的独立服务器。根据不同的机房,价格也是不一样的。大带宽、不限流量比较适合建站、数据备份、做下载、做流媒体、做CDN等多种业务。 官方网站:https://www.sharktech.net 付款方式:比特币、信用卡、PayPal、支付宝、西联汇款 以最贵的洛杉矶机器为例,配置表如...